CVE-2024-6971: Path Traversal in parisneo/lollms-webui
A path traversal vulnerability exists in the ParisNeo/lollms repository, specifically in the lollmsfilesystem.py file. The functions addragdatabase, togglemountragdatabase, and vectorizefolder do not implement security measures such as sanitizepathfromendpoint or sanitizepath. This allows an attacker to perform vectorize operations on .sqlite files in any directory on the victim's computer, potentially installing multiple packages and causing a crash.
Other sources
A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the lollmsfilesystem.py file. The functions addragdatabase, togglemountragdatabase, and vectorizefolder do not implement security measures such as sanitizepathfromendpoint or sanitizepath. This allows an attacker to perform vectorize operations on .sqlite files in any directory on the victim's computer, potentially installing multiple packages and causing a crash.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6971?
CVE-2024-6971 is classified as a medium severity vulnerability due to the potential for unauthorized file access.
How do I fix CVE-2024-6971?
To fix CVE-2024-6971, update to a version of the lollms package that applies security measures to prevent path traversal.
What software is affected by CVE-2024-6971?
CVE-2024-6971 affects the lollms package version 9.5.1 and below.
What caused CVE-2024-6971?
CVE-2024-6971 was caused by the lack of proper path sanitization in specific functions within the lollms_file_system.py file.
Can CVE-2024-6971 lead to data exfiltration?
Yes, CVE-2024-6971 can potentially lead to data exfiltration due to unrestricted file system access.