CVE-2024-7058 — Relative Path Traversal in parisneo/lollms-webui
A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can…
Published: 2025-03-20 · CVSS: 4.4 · CVSS 3.0
A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sanitization by using relative paths such as './'. This can lead to unauthorized access to directories within the personality_folder on the victim's computer.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7