CVE-2024-1873: Path Traversal and Denial of Service in parisneo/lollms-webui
First published: Thu Jun 06 2024(Updated: )
parisneo/lollms-webui is vulnerable to path traversal and denial of service attacks due to an exposed `/select_database` endpoint in version a9d16b0. The endpoint improperly handles file paths, allowing attackers to specify absolute paths when interacting with the `DiscussionsDB` instance. This flaw enables attackers to create directories anywhere on the system where the application has permissions, potentially leading to denial of service by creating directories with names of critical files, such as HTTPS certificate files, causing server startup failures. Additionally, attackers can manipulate the database path, resulting in the loss of client data by constantly changing the file location to an attacker-controlled location, scattering the data across the filesystem and making recovery difficult.
Credit: security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Parisneo Lollms |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-1873?
CVE-2024-1873 is classified as a high severity vulnerability due to the potential for path traversal and denial of service attacks.
How do I fix CVE-2024-1873?
To fix CVE-2024-1873, ensure that the `/select_database` endpoint properly sanitizes file paths and restricts input to avoid absolute paths.
What systems are affected by CVE-2024-1873?
CVE-2024-1873 impacts the Lollms Web UI application version a9d16b0.
What types of attacks can exploit CVE-2024-1873?
CVE-2024-1873 can be exploited for path traversal and denial of service attacks.
Is CVE-2024-1873 being actively exploited in the wild?
There is currently no public information indicating that CVE-2024-1873 is being actively exploited in the wild.
- agent/title
- agent/references
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/lollms
- canonical/parisneo lollms