{"basis":"claimed","id":"CVE-2024-4841","name":"Path Traversal in parisneo/lollms-webui","vendorProject":"parisneo","product":"parisneo/lollms-webui","publishedAt":"2024-06-23","cvss":{"score":4,"severity":"MEDIUM","version":"3.0"},"exploited":null,"epss":{"score":0.00668,"percentile":0.5192,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2025-01-21","daysToRule":212},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"Path Traversal in parisneo/lollms-webui","description":"A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. By exploiting this vulnerability, an attacker can predict the folders, subfolders, and files present on the victim's computer. The vulnerability is present in the way the application handles the 'path' parameter in HTTP requests to the '/add_reference_to_local_model' endpoint.","cwes":["CWE-29"],"vendors":[{"vendor":"cloudflare","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2025-01-21","firstIsNew":true,"daysToRule":212,"daysAtMost":null,"freePlan":false,"claims":[{"id":"c882c510f3dbfda658d395bfd1655eeddf39bfadcf0b9e9af70d9a36b038b4d6","cve_id":"CVE-2024-4841","vendor":"f5","product":"Attack signatures","rule_id":"200007076","rule_name":"LoLLMS WebUI Path Traversal","change":"new","default_action":null,"published_on":"2025-01-21","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200007076 \"LoLLMS WebUI Path Traversal\" (Path Traversal, risk Medium), systems: Other Web Server. References: CVE-2024-4841.","first_seen_at":"2026-11-02T21:00:26.849Z"},{"id":"f18a15eacbcc5209af079346695ca8a2f1df63dd7ada94447c4998304a016270","cve_id":"CVE-2024-4841","vendor":"f5","product":"Attack signatures","rule_id":"200007076","rule_name":"LoLLMS WebUI Path Traversal","change":"new","default_action":null,"published_on":"2025-03-11","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200007076 \"LoLLMS WebUI Path Traversal\" (Path Traversal, risk Medium), systems: Other Web Server. References: CVE-2024-4841.","first_seen_at":"2026-11-02T21:00:26.482Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:16:33.988Z","cvssVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial"},"measured":[{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 1, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:02:57.000Z","verdict":"passed","templateId":"CVE-2024-4841","templatePath":"http/cves/2024/CVE-2024-4841.yaml","requests":2,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"POST","path":"/add_reference_to_local_model","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/add_reference_to_local_model","status":200,"blocked":false,"rules":[]}]},{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 2, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:03:28.000Z","verdict":"passed","templateId":"CVE-2024-4841","templatePath":"http/cves/2024/CVE-2024-4841.yaml","requests":2,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"POST","path":"/add_reference_to_local_model","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/add_reference_to_local_model","status":200,"blocked":false,"rules":[]}]}],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}