{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-05T20:48:21.712","vulnerabilities":[{"cve":{"id":"CVE-2024-1511","sourceIdentifier":"security@huntr.dev","published":"2024-04-10T17:15:51.670","lastModified":"2025-07-09T14:08:00.500","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The parisneo/lollms-webui repository is susceptible to a path traversal vulnerability due to inadequate validation of user-supplied file paths. This flaw allows an unauthenticated attacker to read, write, and in certain configurations execute arbitrary files on the server by exploiting various endpoints. The vulnerability can be exploited even when the service is bound to localhost, through cross-site requests facilitated by malicious HTML/JS pages."},{"lang":"es","value":"El repositorio parisneo/lollms-webui es susceptible a una vulnerabilidad de path traversal debido a una validación inadecuada de las rutas de archivo proporcionadas por el usuario. Esta falla permite que un atacante no autenticado lea, escriba y, en ciertas configuraciones, ejecute archivos arbitrarios en el servidor mediante la explotación de varios endpoints. La vulnerabilidad puede explotarse incluso cuando el servicio está vinculado a localhost, a través de solicitudes entre sitios facilitadas por páginas HTML/JS maliciosas."}],"metrics":{"cvssMetricV30":[{"source":"security@huntr.dev","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"security@huntr.dev","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lollms:lollms_web_ui:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2399B0FB-25C6-49CD-B523-0839533EAC2D"}]}]}],"references":[{"url":"https://huntr.com/bounties/62b77589-772d-4d6e-aef4-2aec4cfe5f8b","source":"security@huntr.dev","tags":["Exploit","Third Party Advisory"]},{"url":"https://huntr.com/bounties/62b77589-772d-4d6e-aef4-2aec4cfe5f8b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}