Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v3f4-7pp9-6f99

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.4

Описание

A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personality_folder on the victim's computer.

A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personality_folder on the victim's computer.

EPSS

Процентиль: 16%
0.00052
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 4.4
nvd
11 месяцев назад

A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personality_folder on the victim's computer.

EPSS

Процентиль: 16%
0.00052
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-23