« Volver al listado

CVE-2024-4315

Estado: AplazadaCrítica (9.1)—

parisneo/lollms version 9.5 is vulnerable to Local File Inclusion (LFI) attacks due to insufficient path sanitization. The `sanitize_path_from_endpoint` function fails to properly sanitize Windows-style paths (backward slash `\`), allowing attackers to perform directory traversal attacks on Windows systems. This vulnerability can be exploited through various routes, including `personalities` and `/del_preset`, to read or delete any file on the Windows filesystem, compromising the system's availability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Parisneo — LollmsAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-4315",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-4315",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-26T14:27:21.754289Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security@huntr.dev",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@huntr.dev",
      "affectedData": [
        {
          "vendor": "parisneo",
          "product": "parisneo/lollms",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "9.8",
              "versionType": "custom"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:parisneo:lollms:9.5:*:*:*:*:*:*:*"
          ],
          "vendor": "parisneo",
          "product": "lollms",
          "versions": [
            {
              "status": "affected",
              "version": "9.5"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-12T01:15:49.490",
  "references": [
    {
      "url": "https://github.com/parisneo/lollms/commit/95ad36eeffc6a6be3e3f35ed35a384d768f0ecf6",
      "source": "security@huntr.dev"
    },
    {
      "url": "https://huntr.com/bounties/8a1b0197-2c36-4276-b92b-630a2a9bb09c",
      "source": "security@huntr.dev"
    },
    {
      "url": "https://github.com/parisneo/lollms/commit/95ad36eeffc6a6be3e3f35ed35a384d768f0ecf6",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://huntr.com/bounties/8a1b0197-2c36-4276-b92b-630a2a9bb09c",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@huntr.dev",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "parisneo/lollms version 9.5 is vulnerable to Local File Inclusion (LFI) attacks due to insufficient path sanitization. The `sanitize_path_from_endpoint` function fails to properly sanitize Windows-style paths (backward slash `\\`), allowing attackers to perform directory traversal attacks on Windows systems. This vulnerability can be exploited through various routes, including `personalities` and `/del_preset`, to read or delete any file on the Windows filesystem, compromising the system's availability."
    },
    {
      "lang": "es",
      "value": "parisneo/lollms versión 9.5 es vulnerable a ataques de inclusión de archivos locales (LFI) debido a una sanitización insuficiente de la ruta. La función `sanitize_path_from_endpoint` no sanitiza adecuadamente las rutas de estilo Windows (barra invertida `\\`), lo que permite a los atacantes realizar ataques de directory traversal en sistemas Windows. Esta vulnerabilidad se puede explotar a través de varias rutas, incluidas `personalities` y `/del_preset`, para leer o eliminar cualquier archivo en el sistema de archivos de Windows, comprometiendo la disponibilidad del sistema."
    }
  ],
  "lastModified": "2026-06-17T08:01:39.453",
  "sourceIdentifier": "security@huntr.dev"
}