CVE-2024-9597

NONE EPSS 21.0%
Published Mar 20, 20251y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 20, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

A Path Traversal vulnerability exists in the `/wipe_database` endpoint of parisneo/lollms version v12, allowing an attacker to delete any directory on the system. The vulnerability arises from improper validation of the `key` parameter, which is used to construct file paths. An attacker can exploit this by sending a specially crafted HTTP request to delete arbitrary directories.

Threat Intelligence

EPSS Exploit Probability
21.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

References 1

  • huntr.com https://huntr.com/bounties/1f6c8908-d486-4141-be55-25bd29933d8b

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.