MJ-bin/POC_CVE-2024-4322

GitHubRepository PoCScanner

PoC files

17 files

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact provides Nuclei templates and Docker-based lab environments to validate detection of CVE-2024-4322, a path traversal vulnerability in LoLLMS WebUI. The primary code consists of YAML templates that send HTTP requests and match responses to identify vulnerable instances without exploiting the vulnerability for malicious purposes.

Backdoor review

No backdoor observed in reviewed code

The supplied evidence consists of a README and two Nuclei templates for CVE-2024-4322. The README describes a Docker-based lab for reproducing a path traversal vulnerability and validating a detection template. The templates define HTTP requests and matchers to detect the vulnerability. No backdoor, deceptive payload, or concealed executable behavior is present in the reviewed text.

ClassificationScanner
Model confidence95%
AuthenticationNot required
LanguagesYAMLMarkdown
Target softwareLoLLMS WebUI
Attack typespath traversal
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact's primary stated purpose is to validate that Nuclei templates correctly detect the vulnerability. The README describes the lab as for 'validating that the associated Nuclei template does not match' patched versions. The YAML templates use matchers to check for vulnerability indicators but do not perform any action beyond detection, such as exfiltrating data or gaining access. This is consistent with a scanner.

README.md:3-5templates/CVE-2024-4322.yaml:1-67

Requirements

  • Target must be running a vulnerable version of LoLLMS WebUI (v9.6) with the /list_personalities endpoint exposed.README.md:4-5
  • Nuclei scanner must be installed to run the templates.README.md:249

Observed behavior

  • Sends a GET request to the root path to verify the target is LoLLMS WebUI by checking for 'LoLLMS WebUI - Welcome' in the response body.templates/CVE-2024-4322.yaml:35-47
  • Sends two GET requests to /list_personalities with category= and category=.. and matches responses to detect path traversal by checking for differences and the presence of 'personalities_zoo'.templates/CVE-2024-4322.yaml:49-67
  • An alternative template sends a single GET request with category=../.. and checks for 'lollms_core' and 'personal_data' in the response.templates/CVE-2024-4322_refined.yaml:48-58
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Url
https://github.com/projectdiscovery/nuclei/releasesExternal reference for downloading Nuclei, a legitimate security tool.README.md:260
Url
https://github.com/ParisNeo/lollms_legacy.gitExternal repository URL used in lab setup to fetch legacy code.README.md:271
Review boundaries

What the analysis did not establish

  • The evidence packet reports complete_artifact_coverage as false, indicating that not all files from the repository are included. Only 3 of 17 files are provided as text, with 10 unclassified files and 4 non-text media files omitted. The analysis is based solely on the provided text files.
  • 14 files (including 4 non-text media files and 10 unclassified files) were omitted from the text evidence and not analyzed.
  • Binary content in the repository was flagged as metadata-only and not inspected.
  • The review covers only the supplied text; no dynamic analysis or execution was performed.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Docker lab environments

1
GitHub

docker-compose.yml

Created Vuln labCVE-2024-4322Compose · mixed

1 Compose manifest · 5 Dockerfiles · 5 services

Analysisdeepseek-v4-pro:cloud ·

Environment assessment

Dockerized lab for reproducing CVE-2024-4322, a path traversal vulnerability in LoLLMS WebUI v9.6, and validating that the associated Nuclei template does not match the patched v9.8. It provides Linux and Windows vulnerable and patched servers, plus an analyst container.

README.md:1-5docker-compose.yml:1-43

Lab assessment

Vulnerability lab

The README explicitly states the repository provides Dockerized local labs for reproducing CVE-2024-4322 and validating a Nuclei template. The Compose file defines vulnerable and patched servers for both Linux and Windows, and the Dockerfiles install specific vulnerable (v9.6) and patched (v9.8) versions of LoLLMS WebUI.

README.md:1-5docker-compose.yml:1-43
Lab shapeCompose · mixed
Services5
Compose manifests1
Dockerfiles5
Evidence & reasoningComponents · CVE assessment · exercise context · review boundaries
Components

Services and files described by the evidence

linux-vuln-server

vulnerable targetLinux server

Builds LoLLMS WebUI v9.6 on Ubuntu 22.04, exposes port 9600 on host port 9600. The Dockerfile downloads the v9.6 installer, pins the source to the vulnerable commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.

linux-vuln-server/Dockerfile:1-86linux-vuln-server/entrypoint.sh:1-8docker-compose.yml:2-8

linux-patched-server

patched targetLinux server

Builds LoLLMS WebUI v9.8 on Ubuntu 22.04, exposes port 9600 on host port 9602. The Dockerfile downloads the v9.8 installer, pins the source to the patched commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.

linux-patched-server/Dockerfile:1-85linux-patched-server/entrypoint.sh:1-8docker-compose.yml:10-17

windows-vuln-server

vulnerable targetWindows server

Builds LoLLMS WebUI v9.6 on Windows Server Core 2022, exposes port 9600 on host port 9601. The Dockerfile downloads the v9.6 Windows installer, pins the source to the vulnerable commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.

windows-vuln-server/Dockerfile:1-58windows-vuln-server/entrypoint.bat:1-5docker-compose.yml:27-34

windows-patched-server

patched targetWindows server

Builds LoLLMS WebUI v9.8 on Windows Server Core 2022, exposes port 9600 on host port 9603. The Dockerfile downloads the v9.8 Windows installer, pins the source to the patched commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.

windows-patched-server/Dockerfile:1-58windows-patched-server/entrypoint.bat:1-5docker-compose.yml:36-43

analyst

analysis tool container

Alpine-based container with curl and jq, depends on linux-vuln-server. Intended for running HTTP requests against the lab servers from within the Docker network.

analyst/Dockerfile:1-7docker-compose.yml:19-26
CVE assessment

How the supplied evidence relates each vulnerability

CVE-2024-4322

Supported by supplied evidence

The README describes CVE-2024-4322 as a path traversal in LoLLMS WebUI v9.6's /list_personalities endpoint. The Dockerfiles for linux-vuln-server and windows-vuln-server install v9.6 and verify the vulnerable source file exists. The README provides expected HTTP responses demonstrating the traversal and validates with a Nuclei template.

README.md:9-25linux-vuln-server/Dockerfile:1-86windows-vuln-server/Dockerfile:1-58
Exercise context

Requirements and sequence described by the evidence

Prerequisites

  • Docker and Docker Compose installed on the host.README.md:260-261
  • For Windows labs, Docker Desktop must be in Windows containers mode.README.md:262
  • curl and jq (or the analyst container) for HTTP verification.README.md:263-265
  • Nuclei for template validation (optional).README.md:266

Evidence-described exercise path

  1. Start the vulnerable Linux server: docker compose up --build -d linux-vuln-serverREADME.md:33-34
  2. Verify the path traversal with curl: curl -sS 'http://127.0.0.1:9600/list_personalities?category=..' returns a list containing 'personalities_zoo'.README.md:46-47
  3. Validate with Nuclei: nuclei -duc -u http://127.0.0.1:9600 -t templates/CVE-2024-4322.yaml -debugREADME.md:58-59
  4. Start the patched Linux server: docker compose --profile patched up --build -d linux-patched-serverREADME.md:73-74
  5. Verify the patched behavior: curl -i 'http://127.0.0.1:9602/list_personalities?category=..' returns HTTP 400.README.md:84-85
  6. Validate with Nuclei: nuclei -duc -u http://127.0.0.1:9602 -t templates/CVE-2024-4322.yaml returns 0 matches.README.md:93-94
  7. Repeat steps for Windows vulnerable and patched servers using the --profile windows and appropriate ports (9601, 9603).README.md:103-200
Safety-review evidence

Behaviors behind the stored safety assessment

No harmful behavior observed

All visible behavior is directed at the lab's own target servers. The Dockerfiles download official installers, pin specific versions, and configure the servers to listen on 0.0.0.0:9600 inside the containers. Port mappings expose the services to the host for testing, which is a legitimate lab requirement. No evidence of host escape, external connections beyond the documented installers, persistence, credential theft, or destructive behavior is present. The analyst container only provides curl and jq for internal network requests.

docker-compose.yml:1-43linux-vuln-server/Dockerfile:1-86linux-patched-server/Dockerfile:1-85windows-vuln-server/Dockerfile:1-58windows-patched-server/Dockerfile:1-58analyst/Dockerfile:1-7
Review boundaries

What the analysis did not establish

  • The packet does not include the Nuclei template files (templates/CVE-2024-4322.yaml and templates/CVE-2024-4322_refined.yaml) as text evidence, so their content cannot be analyzed.
  • The entrypoint scripts (entrypoint.sh, entrypoint.bat) are simple launchers; their behavior depends on the LoLLMS WebUI application code, which is not fully included in the packet.
  • The Dockerfiles download and execute official installers from GitHub releases; while the URLs are documented, the actual installer content is not inspected in this packet.
Model interpretation

This review is limited to the supplied lab evidence packet. It does not assert that the environment runs, reproduces a vulnerability, or is safe to execute. Contract: eip-docker-lab-analysis-v1.

Linked vulnerabilities

1