CVE-2024-4330

Advisory

Affected versions of the lollms package are vulnerable to Path Traversal due to improper handling of user-supplied input in the `list_personalities` endpoint. The `endpoints/lollms_advanced.py` component fails to sanitize the `category` parameter, allowing attackers to manipulate directory traversal sequences to access arbitrary directories. A remote attacker can exploit this by sending a crafted HTTP request to the `list_personalities` endpoint with a malicious `category` value, enabling viewing of subfolder names across the file system and compromising confidentiality.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-9p73-x86v-jw57
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4330