CVE-2024-6281
CVE-2024-6281
Título es
CVE-2024-6281
Sáb, 20/07/2024 – 04:15
Tipo
CWE-440
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2024-6281
Descripción en
A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.
20/07/2024
20/07/2024
Vector CVSS:3.1
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Gravedad 3.1 (CVSS 3.1 Base Score)
7.30
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
HIGH
Referencias
Enviar en el boletín
Off
