CVE-2024-8581 — Path Traversal in parisneo/lollms-webui
A vulnerability in the `upload_app` function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any file or directory on the system. The function does not im…
Published: 2025-03-20 · CVSS: 9.1 · CVSS 3.0
A vulnerability in the `upload_app` function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any file or directory on the system. The function does not implement user input filtering with the `filename` value, causing a Path Traversal error.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7