CVE-2024-10047 — Directory Listing Vulnerability in parisneo/lollms-webui
parisneo/lollms-webui versions v9.9 to the latest are vulnerable to a directory listing vulnerability. An attacker can list arbitrary directories on a Windows system by sending …
Published: 2025-03-20 · CVSS: 5.3 · CVSS 3.0
parisneo/lollms-webui versions v9.9 to the latest are vulnerable to a directory listing vulnerability. An attacker can list arbitrary directories on a Windows system by sending a specially crafted HTTP request to the /open_file endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7