CVE-2024-6250

nvd nist nuclei

Published: Jun 27, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: security@huntr.dev (Secondary)

Description

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the `open_file` endpoint of `lollms_advanced.py`. The `sanitize_path` function with `allow_absolute_path=True` allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can be exploited to read any file and list arbitrary directories on the affected system.

Affected (1)

Products: Lollms: Lollms Web Ui

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lollms Lollms Web Ui	Version 9.6

Related CWEs

Absolute Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.

References (2)

https://huntr.com/bounties/11a8bf9d-16f3-49b3-b5fc-ad36d8993c73

Source: security@huntr.dev

ExploitIssue TrackingThird Party Advisory

https://huntr.com/bounties/11a8bf9d-16f3-49b3-b5fc-ad36d8993c73

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.