CVE-2024-4498 — HIGH (7.7) — White Hats Nepal

Vulnerability Description

A Path Traversal and Remote File Inclusion (RFI) vulnerability exists in the parisneo/lollms-webui application, affecting versions v9.7 to the latest. The vulnerability arises from insufficient input validation in the `/apply_settings` function, allowing an attacker to manipulate the `discussion_db_name` parameter to traverse the file system and include arbitrary files. This issue is compounded by the bypass of input filtering in the `install_binding`, `reinstall_binding`, and `unInstall_binding` endpoints, despite the presence of a `sanitize_path_from_endpoint(data.name)` filter. Successful exploitation enables an attacker to upload and execute malicious code on the victim's system, leading to Remote Code Execution (RCE).

CVSS Score

7.7

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Lollms	Lollms Web Ui	9.7

Related Weaknesses (CWE)

CWE-22

References

https://huntr.com/bounties/9238e88a-a6ca-4915-9b5d-6cdb4148d3f4ExploitIssue TrackingPatch
https://huntr.com/bounties/9238e88a-a6ca-4915-9b5d-6cdb4148d3f4ExploitIssue TrackingPatch

FAQ

What is CVE-2024-4498?

CVE-2024-4498 is a vulnerability with a CVSS score of 7.7 (HIGH). A Path Traversal and Remote File Inclusion (RFI) vulnerability exists in the parisneo/lollms-webui application, affecting versions v9.7 to the latest. The vulnerability arises from insufficient input ...

How severe is CVE-2024-4498?

CVE-2024-4498 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-4498?

Check the references section above for vendor advisories and patch information. Affected products include: Lollms Lollms Web Ui.