CVE-2024-6281

Advisory

Affected versions of the lollms package are vulnerable to Path Traversal due to insufficient sanitization of the discussion_db_name parameter by the sanitize_path function. The apply_settings function fails to properly validate the discussion_db_name, allowing specially crafted values containing directory traversal sequences to manipulate file paths. A local attacker can exploit this by invoking apply_settings with a malicious discussion_db_name to write files into sensitive system directories, potentially altering system configuration or disrupting service availability.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://huntr.com/bounties/0a62f2fb-4e62-4128-9dc4-e8f1d959ac61
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6281