Количество 2
Количество 2
CVE-2024-5824
A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.
GHSA-m45c-v46h-c788
lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-5824 A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`. | CVSS3: 7.4 | 1% Низкий | больше 1 года назад |
| GHSA-m45c-v46h-c788 lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE | CVSS3: 7.4 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу