CVE-2024-6581: Remote Code Execution due to Stored XSS in parisneo/lollms
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitizesvg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitizesvg function only removes script elements and 'on' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6581?
CVE-2024-6581 is classified as a high-severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2024-6581?
To mitigate CVE-2024-6581, ensure that the sanitize_svg function properly filters SVG uploads to prevent XSS vulnerabilities.
Which versions of Lollms are affected by CVE-2024-6581?
CVE-2024-6581 affects Lollms version 9.9 and earlier versions up to 9.5.1.
What type of vulnerability is CVE-2024-6581?
CVE-2024-6581 is a cross-site scripting (XSS) vulnerability resulting from inadequate SVG file filtration.
Is there a patch available for CVE-2024-6581?
As of now, a patch for CVE-2024-6581 has not been explicitly mentioned, so users should implement code changes to sanitize SVG uploads.