Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Path Traversal in parisneo/lollms-webui
Vulnerability Description
A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the 'apply_settings' function, allowing an attacker to manipulate the application's configuration by sending specially crafted JSON payloads. This could lead to remote code execution (RCE) by bypassing existing patches designed to mitigate such vulnerabilities.
CVSS Information
N/A
Vulnerability Type
路径遍历：’..filename’
Vulnerability Title
LoLLMs 安全漏洞
Vulnerability Description
LoLLMs是Saifeddine ALOUI个人开发者的一个大型语言多模式系统的 Web UI。 LoLLMs 9.5之前版本存在安全漏洞，该漏洞源于对 /apply_settings 函数中的 config 参数清理不充分，允许攻击者通过发送特制的 JSON 有效载荷来操纵应用程序的配置。
CVSS Information
N/A
Vulnerability Type
N/A