CVE-2024-6139

Published: Jun 27, 2024Modified: Jun 17, 2026Deferred

7.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: security@huntr.dev (Secondary)

Description

A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio files to arbitrary locations on the system and enumerate file paths. The issue arises from improper validation of user-provided file paths in the `tts_to_file` endpoint.

Related CWEs

CWE-29

Path Traversal: '\..\filename'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

References (2)

https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0

Source: security@huntr.dev

https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.