parisneo/lollms-webui vulnerabilities

42 known vulnerabilities in parisneo/lollms-webui from ParisNeo. 42 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  parisneo/lollms-webui: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-1511Apr 10, 2024ParisNeo

  The parisneo/lollms-webui repository is susceptible to a path traversal vulnerability due to inadequate validation of user-supplied file paths. This flaw allows an unauthenticated attacker to read, write, and in certain configurations execute arbitrary files o

• 8.8 High severity

  parisneo/lollms-webui: Cross-Site Request Forgery

  CVE-2024-1522Mar 30, 2024ParisNeo

  A Cross-Site Request Forgery (CSRF) vulnerability in the parisneo/lollms-webui project allows remote attackers to execute arbitrary code on a victim's system. The vulnerability stems from the `/execute_code` API endpoint, which does not properly validate reque