Skip to content
OpenAdvisories

Vendor

parisneo

84 known vulnerabilities.

Products

parisneo/lollms-webui 53 parisneo/lollms 30 lollms-webui 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2024-3435 Public exploit

    Path Traversal in parisneo/lollms-webui

    A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the …

    parisneo parisneo/lollms-webui
  • High 7.5
    CVE-2024-4322 Public exploit Scanner template EPSS 31%

    Path Traversal in parisneo/lollms-webui

    A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the sy…

    parisneo parisneo/lollms-webui