CVE-2024-6281

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-6281
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6281.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-6281
Aliases
Published
2024-07-20T04:15:05Z
Modified
2024-10-08T04:24:39.061764Z
Summary
[none]
Details

A path traversal vulnerability exists in the apply_settings function of parisneo/lollms versions prior to 9.5.1. The sanitize_path function does not adequately secure the discussion_db_name parameter, allowing attackers to manipulate the path and potentially write to important system folders.

References

Affected packages

Git / github.com/parisneo/lollms

Affected ranges

Type
GIT
Repo
https://github.com/parisneo/lollms
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
26a3ff35acf152b49e1087d5698ad4864c7b6092

Affected versions

v5.*

v5.9.0