CVE-2024-4078

{"id": "CVE-2024-4078", "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-05-16T09:15:15.313", "references": [{"url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f", "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d", "source": "security@huntr.dev"}, {"url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed."}, {"lang": "es", "value": "Una vulnerabilidad en parisneo/lollms, espec\u00edficamente en el endpoint `/unInstall_binding`, permite la ejecuci\u00f3n de c\u00f3digo arbitrario debido a una sanitizaci\u00f3n insuficiente de la entrada del usuario. El problema surge de la falta de sanitizaci\u00f3n de rutas al manejar el par\u00e1metro `name` en la funci\u00f3n `unInstall_binding`, lo que permite a un atacante atravesar directorios y ejecutar c\u00f3digo arbitrario cargando un archivo `__init__.py` malicioso. Esta vulnerabilidad afecta a la \u00faltima versi\u00f3n del software. La explotaci\u00f3n de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo en el sistema donde est\u00e1 implementado parisneo/lollms."}], "lastModified": "2024-11-21T09:42:09.057", "sourceIdentifier": "security@huntr.dev"}