CVE-2024-6095
MEDIUM NUCLEImudler/localai < 2.17.0 - Server-Side Request Forgery and Partial Local File Inclusion via /models/apply Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-6095. PoCs published by Abdurahmon3236. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2024-6095 by sending crafted payloads to a target endpoint, leveraging SSRF and LFI techniques with obfuscation and evasion methods. It includes random delays, custom headers, and encoded payloads to bypass detection.
Description
A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latter can lead to LFI. However, the output is limited due to the length of the error message. This vulnerability can be exploited by an attacker with network access to the LocalAI instance, potentially allowing unauthorized access to internal HTTP(s) servers and partial reading of local files. The issue is fixed in version 2.17.
Exploits (1)
This PoC exploits CVE-2024-6095 by sending crafted payloads to a target endpoint, leveraging SSRF and LFI techniques with obfuscation and evasion methods. It includes random delays, custom headers, and encoded payloads to bypass detection.
Nuclei Templates (1)
http.favicon.hash:-976853304
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N