deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32007
Published: 2024-07-19
Description: An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a token. 

CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-400
References: https://lists.apache.org/thread/stwrgsr1llb73nkl16klv9vjqgmmx633; http://www.openwall.com/lists/oss-security/2024/07/18/3; https://lists.apache.org/thread/stwrgsr1llb73nkl16klv9vjqgmmx633
CVE: CVE-2024-39457
Published: 2024-07-19
Description: Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN74825766/; https://kb.cybozu.support/?product=garoon&v=&fv=6.0.2&t=%E8%84%86%E5%BC%B1%E6%80%A7&f=&r=&b=&s=&posts_per_page=20; https://jvn.jp/en/jp/JVN74825766/
CVE: CVE-2024-41172
Published: 2024-07-19
Description: In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run  out of memory

CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://lists.apache.org/thread/n2hvbrgwpdtcqdccod8by28ynnolybl6; http://www.openwall.com/lists/oss-security/2024/07/18/4; https://lists.apache.org/thread/n2hvbrgwpdtcqdccod8by28ynnolybl6
CVE: CVE-2024-6904
Published: 2024-07-19
Description: A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort2_user.php. The manipulation of the argument qualification leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271929 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-07.md; https://vuldb.com/?ctiid.271929; https://vuldb.com/?id.271929
CVE: CVE-2024-6905
Published: 2024-07-19
Description: A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_info_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-271930 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-08.md; https://vuldb.com/?ctiid.271930; https://vuldb.com/?id.271930
CVE: CVE-2024-6906
Published: 2024-07-19
Description: A vulnerability was found in SourceCodester Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file add_leave_non_user.php. The manipulation of the argument LSS leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271931.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-09.md; https://vuldb.com/?ctiid.271931; https://vuldb.com/?id.271931
CVE: CVE-2024-6907
Published: 2024-07-19
Description: A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file sort.php. The manipulation of the argument sort leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271932.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/netmanzhang/VUL/blob/main/Record-Management-System-10.md; https://vuldb.com/?ctiid.271932; https://vuldb.com/?id.271932
CVE: CVE-2024-41107
Published: 2024-07-19
Description: The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account.

Affected users are recommended to disable the SAML authentication plugin by setting the "saml2.enabled" global setting to "false", or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-290
References: http://www.openwall.com/lists/oss-security/2024/07/19/1; http://www.openwall.com/lists/oss-security/2024/07/19/2; https://cloudstack.apache.org/blog/security-release-advisory-cve-2024-41107
CVE: CVE-2024-5977
Published: 2024-07-19
Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.13.0 via the 'handleRequest' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with GiveWP Worker-level access and above, to delete and update arbitrary posts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://plugins.trac.wordpress.org/browser/give/trunk/src/DonationForms/V2/Endpoints/FormActions.php#L96; https://plugins.trac.wordpress.org/changeset/3120745/; https://www.wordfence.com/threat-intel/vulnerabilities/id/2dca6c29-9f05-4d82-90e3-834f1dd8005a?source=cve
CVE: CVE-2024-6916
Published: 2024-07-19
Description: A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-922
References: https://github.com/zowe/zowe-cli/packages/imperative; https://github.com/zowe/zowe-cli/packages/imperative
CVE: CVE-2024-37066
Published: 2024-07-19
Description: A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://forums.wyze.com/t/security-advisory/289256; https://hiddenlayer.com/sai-security-advisory/2024-7-wyze/; https://forums.wyze.com/t/security-advisory/289256
CVE: CVE-2024-0006
Published: 2024-07-19
Description: Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.
CWE: CWE-532
References: https://github.com/yugabyte/yugabyte-db/commit/439c6286f1971f9ac6bff2c7215b454c2025c593; https://github.com/yugabyte/yugabyte-db/commit/5cc7f4e15d6ccccbf97c57946fd0aa630f88c9e2; https://github.com/yugabyte/yugabyte-db/commit/d96e6b629f34d065b47204daeeb44064e484c579
CVE: CVE-2024-27489
Published: 2024-07-19
Description: An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-473, CWE-791
References: https://gist.github.com/yyyyy7777777/a36541cb60d9e55628f78f2a68968212; https://gitee.com/y[PII_REDACTED]/poc-public/issues/I920OW; https://gist.github.com/yyyyy7777777/a36541cb60d9e55628f78f2a68968212
CVE: CVE-2024-39962
Published: 2024-07-19
Description: D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (RCE) vulnerability in the ntp_zone_val parameter at /goform/set_ntp. This vulnerability is exploited via a crafted HTTP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/Swind1er/40c33f1b[PII_REDACTED]cb4e2e5ef69109; https://gist.github.com/Swind1er/40c33f1b[PII_REDACTED]cb4e2e5ef69109
CVE: CVE-2024-39963
Published: 2024-07-19
Description: AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the macFilterType parameter at /goform/setMacFilterCfg.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://gist.github.com/Swind1er/c8e4369c7fdfd750c8ad01a276105c57; https://gist.github.com/Swind1er/c8e4369c7fdfd750c8ad01a276105c57
CVE: CVE-2024-6895
Published: 2024-07-19
Description: Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session to change critical security information without re-authentication. An attacker with user session and access to application can modify settings such as password and email without being prompted for the current password, enabling account takeover.
CWE: CWE-306
References: https://github.com/yugabyte/yugabyte-db/commit/9687371d8777f876285b737a9d01995bc46bafa5; https://github.com/yugabyte/yugabyte-db/commit/9687371d8777f876285b737a9d01995bc46bafa5
CVE: CVE-2024-6908
Published: 2024-07-19
Description: Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.
CWE: CWE-269
References: https://github.com/yugabyte/yugabyte-db/commit/03b193de40b79329439bb9968a7d27a1cc57d662; https://github.com/yugabyte/yugabyte-db/commit/68f01680c565be2a370cfb7734a1b3721d6778bb; https://github.com/yugabyte/yugabyte-db/commit/03b193de40b79329439bb9968a7d27a1cc57d662
CVE: CVE-2024-24970
Published: 2024-07-19
Description: Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of privilege. 
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://support.hp.com/us-en/document/ish_10[PII_REDACTED]4901-16/hpsbhf03954; https://support.hp.com/us-en/document/ish_10[PII_REDACTED]4901-16/hpsbhf03954
CVE: CVE-2024-29080
Published: 2024-07-19
Description: Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of privilege.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-281
References: https://support.hp.com/us-en/document/ish_10[PII_REDACTED]4901-16/hpsbhf03954; https://support.hp.com/us-en/document/ish_10[PII_REDACTED]4901-16/hpsbhf03954
CVE: CVE-2024-41281
Published: 2024-07-19
Description: Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/BuaaIOTTeam/Iot_Linksys/blob/main/Linksys_WRT54G_get_merge_mac.md; https://github.com/BuaaIOTTeam/Iot_Linksys/blob/main/Linksys_WRT54G_get_merge_mac.md
CVE: CVE-2024-41492
Published: 2024-07-19
Description: A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://gist.github.com/Swind1er/4176fdc25e415296904c9fb19e2f8293; https://gist.github.com/Swind1er/4176fdc25e415296904c9fb19e2f8293
CVE: CVE-2024-41601
Published: 2024-07-19
Description: Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-277
References: https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41601; https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41601
CVE: CVE-2024-41602
Published: 2024-07-19
Description: Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41602; https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41602
CVE: CVE-2024-41603
Published: 2024-07-19
Description: Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41603; https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41603
CVE: CVE-2024-41600
Published: 2024-07-19
Description: Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41600; https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41600
CVE: CVE-2024-40400
Published: 2024-07-19
Description: An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/marcantondahmen/automad/issues/106; https://github.com/marcantondahmen/automad/issues/106
CVE: CVE-2024-39123
Published: 2024-07-19
Description: In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2024-39123; https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2024-39123
CVE: CVE-2024-39906
Published: 2024-07-19
Description: A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web application. The affected functionality requires authentication, but an attacker can craft a link that they can pass to a logged in administrator of the blog software. This leads to the immediate execution of the provided commands when the link is accessed by the authenticated administrator. This issue may lead to Remote Code Execution (RCE) and has been addressed by commit `c52f07c`. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 8.3 (HIGH)
CWE: CWE-74
References: https://github.com/havenweb/haven/commit/c52f07c; https://github.com/havenweb/haven/security/advisories/GHSA-65cm-7g24-hm9f; https://github.com/havenweb/haven/commit/c52f07c
CVE: CVE-2024-41121
Published: 2024-07-19
Description: Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://github.com/woodpecker-ci/woodpecker-security/issues/8; https://github.com/woodpecker-ci/woodpecker-security/issues/9; https://github.com/woodpecker-ci/woodpecker-security/pull/11
CVE: CVE-2024-41122
Published: 2024-07-19
Description: Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://github.com/woodpecker-ci/woodpecker-security/issues/10; https://github.com/woodpecker-ci/woodpecker/issues/3929; https://github.com/woodpecker-ci/woodpecker/pull/3909
CVE: CVE-2024-41124
Published: 2024-07-19
Description: Puncia is the Official CLI utility for Subdomain Center & Exploit Observer. `API_URLS` is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access & MITM Attacks. This issue has been addressed in release version 0.21 by using https rather than http connections. All users are advised to upgrade. There is no known workarounds for this vulnerability.

CVSS Score: 6.3 (MEDIUM)
CWE: CWE-311, CWE-319
References: https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd#diff-3ec6c2de51e702726b23c452e3f4a899f6f4253af9fbf5be7254a5c1407ab526; https://github.com/ARPSyndicate/puncia/issues/8; https://github.com/ARPSyndicate/puncia/security/advisories/GHSA-rwcj-7jjp-4w38
CVE: CVE-2024-41597
Published: 2024-07-19
Description: Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-352
References: https://gist.github.com/DefensiumDevelopers/608be4d10b016dce[PII_REDACTED]a8b08c#file-cve-2024-41597-md; https://gist.github.com/DefensiumDevelopers/608be4d10b016dce[PII_REDACTED]a8b08c#file-cve-2024-41597-md
CVE: CVE-2024-41599
Published: 2024-07-19
Description: Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41599; https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41599
CVE: CVE-2024-5804
Published: 2024-07-20
Description: The Conditional Fields for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.13. This is due to missing or incorrect nonce validation on the wpcf7cf_admin_init function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/cf7-conditional-fields/trunk/wpcf7cf-options.php#L285; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3121497%40cf7-conditional-fields&new=3121497%40cf7-conditional-fields&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/827c5dc2-3195-47d9-9e44-ca2043748eed?source=cve
CVE: CVE-2024-2337
Published: 2024-07-20
Description: The Easy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testimonials_grid ' shortcode in all versions up to, and including, 3.9.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/easy-testimonials/trunk/easy-testimonials.php#L1039; https://www.wordfence.com/threat-intel/vulnerabilities/id/2c470cb0-5cbc-4ae1-b75a-384668d07215?source=cve; https://plugins.trac.wordpress.org/browser/easy-testimonials/trunk/easy-testimonials.php#L1039
CVE: CVE-2024-6560
Published: 2024-07-20
Description: The Addonify – Quick View For WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.16. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/addonify-quick-view/trunk/vendor/mobiledetect/mobiledetectlib/export/exportToJSON.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3121821%40addonify-quick-view&new=3121821%40addonify-quick-view&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/c38eaab5-157c-43fa-ad67-6f063274ba69?source=cve
CVE: CVE-2024-3934
Published: 2024-07-20
Description: The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to Path Traversal in versions 7.3.0 to 7.5.1 via the mercadopagoDownloadLog function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download and read the contents of arbitrary files on the server, which can contain sensitive information. The arbitrary file download was patched in 7.5.1, while the missing authorization was corrected in version 7.6.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/woocommerce-mercadopago/trunk/src/Admin/Settings.php#L663; https://plugins.trac.wordpress.org/changeset/3098023/woocommerce-mercadopago/trunk/src/IO/Downloader.php?old=3078706&old_path=woocommerce-mercadopago%2Ftrunk%2Fsrc%2FIO%2FDownloader.php; https://plugins.trac.wordpress.org/changeset/3119214/woocommerce-mercadopago/tags/7.6.2/src/IO/Downloader.php?old=3108278&old_path=woocommerce-mercadopago%2Ftags%2F7.6.1%2Fsrc%2FIO%2FDownloader.php
CVE: CVE-2024-40347
Published: 2024-07-20
Description: A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter htmlid.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/4rdr/proofs/blob/main/info/Alfresco_Reflected_XSS_via_htmlid_parameter.md; https://github.com/4rdr/proofs/blob/main/info/Alfresco_Reflected_XSS_via_htmlid_parameter.md
CVE: CVE-2024-40348
Published: 2024-07-20
Description: An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22
References: https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md; https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md
CVE: CVE-2024-6281
Published: 2024-07-20
Description: A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: https://github.com/parisneo/lollms/commit/26a3ff35acf152b49e1087d5698ad4864c7b6092; https://huntr.com/bounties/0a62f2fb-4e62-4128-9dc4-e8f1d959ac61; https://github.com/parisneo/lollms/commit/26a3ff35acf152b49e1087d5698ad4864c7b6092