CVE-2024-4881: Path Traversal in parisneo/lollms
A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 5.9.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (\), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the /userinfos endpoint, where a crafted request using backslashes to reference a file (e.g., \windows\win.ini) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.
Other sources
A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 9.5.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (\), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the /userinfos endpoint, where a crafted request using backslashes to reference a file (e.g., \windows\win.ini) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/lollmsto a version that resolves this vulnerability.Fixed in 9.5.0 - Upgrade
Upgrade
parisneo/lollmsto a version that resolves this vulnerability.Fixed in 5.9.0 - Upgrade
Upgrade
parisneo/lollmsto a version that resolves this vulnerability.Fixed in 9.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4881?
CVE-2024-4881 is classified as a moderate severity path traversal vulnerability affecting the lollms application.
How do I fix CVE-2024-4881?
To remediate CVE-2024-4881, upgrade the lollms application to version 9.5.0 or later.
Which versions of lollms are affected by CVE-2024-4881?
CVE-2024-4881 affects lollms version 9.4.0 and potentially earlier versions.
Is CVE-2024-4881 applicable to both Windows and Linux environments?
Yes, CVE-2024-4881 arises from improper path validation in both Windows and Linux environments.
What is the impact of CVE-2024-4881?
CVE-2024-4881 can allow attackers to bypass security measures and access unauthorized file paths.