CVE-2024-2178

A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' endpoint in the 'lollms_personalities_infos.py' file. This vulnerability allows attackers to read arbitrary files by manipulating the 'category' and 'name' parameters during the 'Copy to custom personas folder for editing' process. By inserting '../' sequences in these parameters, attackers can traverse the directory structure and access files outside of the intended directory. Successful exploitation results in unauthorized access to sensitive information.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://huntr.com/bounties/e585f1dd-a026-4419-8f42-5835e85fad9e	Exploit Third Party Advisory Issue Tracking Patch
https://huntr.com/bounties/e585f1dd-a026-4419-8f42-5835e85fad9e	Exploit Third Party Advisory Issue Tracking Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:lollms:lollms_web_ui:*:*:*:*:*:*:*:*

History

09 Jul 2025, 14:25

Type	Values Removed	Values Added
CPE		cpe:2.3:a:lollms:lollms_web_ui::::::::
First Time		Lollms lollms Web Ui Lollms
References	~~() https://huntr.com/bounties/e585f1dd-a026-4419-8f42-5835e85fad9e -~~	() https://huntr.com/bounties/e585f1dd-a026-4419-8f42-5835e85fad9e - Exploit, Third Party Advisory, Issue Tracking, Patch

Information

Published : 2024-06-02 11:15

Updated : 2025-07-09 14:25

NVD link : CVE-2024-2178

Mitre link : CVE-2024-2178

CVE.ORG link : CVE-2024-2178

JSON object : View

Products Affected

lollms

lollms_web_ui

CWE

CWE-29

Path Traversal: '\..\filename'

{"id": "CVE-2024-2178", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-06-02T11:15:07.390", "references": [{"url": "https://huntr.com/bounties/e585f1dd-a026-4419-8f42-5835e85fad9e", "tags": ["Exploit", "Third Party Advisory", "Issue Tracking", "Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/e585f1dd-a026-4419-8f42-5835e85fad9e", "tags": ["Exploit", "Third Party Advisory", "Issue Tracking", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-29"}]}], "descriptions": [{"lang": "en", "value": "A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' endpoint in the 'lollms_personalities_infos.py' file. This vulnerability allows attackers to read arbitrary files by manipulating the 'category' and 'name' parameters during the 'Copy to custom personas folder for editing' process. By inserting '../' sequences in these parameters, attackers can traverse the directory structure and access files outside of the intended directory. Successful exploitation results in unauthorized access to sensitive information."}, {"lang": "es", "value": "Existe una vulnerabilidad de path traversal en parisneo/lollms-webui, espec\u00edficamente dentro del endpoint 'copy_to_custom_personas' en el archivo 'lollms_personalities_infos.py'. Esta vulnerabilidad permite a los atacantes leer archivos arbitrarios manipulando los par\u00e1metros 'categor\u00eda' y 'nombre' durante el proceso 'Copiar a la carpeta de personas personalizadas para editar'. Al insertar secuencias '../' en estos par\u00e1metros, los atacantes pueden atravesar la estructura del directorio y acceder a archivos fuera del directorio deseado. La explotaci\u00f3n exitosa da como resultado el acceso no autorizado a informaci\u00f3n confidencial."}], "lastModified": "2025-07-09T14:25:18.873", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lollms:lollms_web_ui:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8DA02EF-1A49-47C3-B2E4-5F70C25D8B34", "versionEndExcluding": "9.4"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}