Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: parisneo/lollms-webui 9.5 Clear all filters
TI-2024-03205 CVE-2024-3435 · GHSA-4v3g-89jr-8hcp

Path Traversal in parisneo/lollms-webui

Priority HIGH 72

A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.00825 Published 2024-05-16 Fixed in 9.5 CWE-29
TI-2024-02928 CVE-2024-3126 · GHSA-6w8c-vq68-25hc

Command Injection in parisneo/lollms-webui

Priority MEDIUM 41

A command injection vulnerability exists in the 'run_xtts_api_server' function of the parisneo/lollms-webui application, specifically within the 'lollms_xtts.py' script.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.01321 Published 2024-05-16 Fixed in 9.5 CWE-78