Path Traversal in parisneo/lollms-webui
CVE-2024-4322 has a selected CVSS score of 7.5 (high); EIP currently links 1 repository PoC, 1 Nuclei template, and 1 lab environment.
A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the system. This issue affects the latest version of the application. The vulnerability is due to improper handling of user-supplied input in the `list_personalities` function, where the `category` parameter can be controlled to specify arbitrary directories for listing. Successful exploitation of this vulnerability could allow an attacker to list all folders in the drive on the system, potentially leading to information disclosure.
| Product | Source | Version range | Status |
|---|---|---|---|
parisneo/lollms-webuiBrowse parisneo / parisneo/lollms-webui | CVE List | Through latest | affected |
The artifact provides Nuclei templates and Docker-based lab environments to validate detection of CVE-2024-4322, a path traversal vulnerability in LoLLMS WebUI. The primary code consists of YAML templates that send HTTP requests and match responses to identify vulnerable instances without exploiting the vulnerability for malicious purposes.
No backdoor observed in reviewed code
The supplied evidence consists of a README and two Nuclei templates for CVE-2024-4322. The README describes a Docker-based lab for reproducing a path traversal vulnerability and validating a detection template. The templates define HTTP requests and matchers to detect the vulnerability. No backdoor, deceptive payload, or concealed executable behavior is present in the reviewed text.
The artifact's primary stated purpose is to validate that Nuclei templates correctly detect the vulnerability. The README describes the lab as for 'validating that the associated Nuclei template does not match' patched versions. The YAML templates use matchers to check for vulnerability indicators but do not perform any action beyond detection, such as exfiltrating data or gaining access. This is consistent with a scanner.
README.md:3-5templates/CVE-2024-4322.yaml:1-67README.md:4-5README.md:249templates/CVE-2024-4322.yaml:35-47templates/CVE-2024-4322.yaml:49-67templates/CVE-2024-4322_refined.yaml:48-58README.md:260README.md:271This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.
Dockerized lab for reproducing CVE-2024-4322, a path traversal vulnerability in LoLLMS WebUI v9.6, and validating that the associated Nuclei template does not match the patched v9.8. It provides Linux and Windows vulnerable and patched servers, plus an analyst container.
README.md:1-5docker-compose.yml:1-43The README explicitly states the repository provides Dockerized local labs for reproducing CVE-2024-4322 and validating a Nuclei template. The Compose file defines vulnerable and patched servers for both Linux and Windows, and the Dockerfiles install specific vulnerable (v9.6) and patched (v9.8) versions of LoLLMS WebUI.
README.md:1-5docker-compose.yml:1-43Builds LoLLMS WebUI v9.6 on Ubuntu 22.04, exposes port 9600 on host port 9600. The Dockerfile downloads the v9.6 installer, pins the source to the vulnerable commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.
linux-vuln-server/Dockerfile:1-86linux-vuln-server/entrypoint.sh:1-8docker-compose.yml:2-8Builds LoLLMS WebUI v9.8 on Ubuntu 22.04, exposes port 9600 on host port 9602. The Dockerfile downloads the v9.8 installer, pins the source to the patched commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.
linux-patched-server/Dockerfile:1-85linux-patched-server/entrypoint.sh:1-8docker-compose.yml:10-17Builds LoLLMS WebUI v9.6 on Windows Server Core 2022, exposes port 9600 on host port 9601. The Dockerfile downloads the v9.6 Windows installer, pins the source to the vulnerable commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.
windows-vuln-server/Dockerfile:1-58windows-vuln-server/entrypoint.bat:1-5docker-compose.yml:27-34Builds LoLLMS WebUI v9.8 on Windows Server Core 2022, exposes port 9600 on host port 9603. The Dockerfile downloads the v9.8 Windows installer, pins the source to the patched commit, and configures the server to listen on 0.0.0.0:9600. The entrypoint starts the app.
windows-patched-server/Dockerfile:1-58windows-patched-server/entrypoint.bat:1-5docker-compose.yml:36-43Alpine-based container with curl and jq, depends on linux-vuln-server. Intended for running HTTP requests against the lab servers from within the Docker network.
analyst/Dockerfile:1-7docker-compose.yml:19-26Supported by supplied evidence
The README describes CVE-2024-4322 as a path traversal in LoLLMS WebUI v9.6's /list_personalities endpoint. The Dockerfiles for linux-vuln-server and windows-vuln-server install v9.6 and verify the vulnerable source file exists. The README provides expected HTTP responses demonstrating the traversal and validates with a Nuclei template.
README.md:9-25linux-vuln-server/Dockerfile:1-86windows-vuln-server/Dockerfile:1-58README.md:260-261README.md:262README.md:263-265README.md:266README.md:33-34README.md:46-47README.md:58-59README.md:73-74README.md:84-85README.md:93-94README.md:103-200All visible behavior is directed at the lab's own target servers. The Dockerfiles download official installers, pin specific versions, and configure the servers to listen on 0.0.0.0:9600 inside the containers. Port mappings expose the services to the host for testing, which is a legitimate lab requirement. No evidence of host escape, external connections beyond the documented installers, persistence, credential theft, or destructive behavior is present. The analyst container only provides curl and jq for internal network requests.
docker-compose.yml:1-43linux-vuln-server/Dockerfile:1-86linux-patched-server/Dockerfile:1-85windows-vuln-server/Dockerfile:1-58windows-patched-server/Dockerfile:1-58analyst/Dockerfile:1-7This review is limited to the supplied lab evidence packet. It does not assert that the environment runs, reproduces a vulnerability, or is safe to execute. Contract: eip-docker-lab-analysis-v1.
parisneo/lollms-webui contains a path traversal caused by improper handling of 'category' parameter in /list_personalities endpoint, letting attackers list arbitrary directories, exploit requires control over 'category' parameter.
Attackers can list all directories on the system, leading to potential information disclosure and further exploitation.
Implement proper input validation and sanitization for the 'category' parameter; update to the latest version with security patches.
Source: ProjectDiscovery