PatchTheCVElollms-webui vulnerabilities and fixes
Recent CVEs affecting lollms-webui, with upgrade or downgrade steps. 4 tracked.
Also searched as: lollms webui.
lollms-webui has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-11-14. Highest priority: CVE-2024-5125 (score 37/100).
- CVE-2024-6971 MEDIUM 4.4 DOWNGRADE A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the `lollms_fil
- CVE-2024-5125 HIGH 7.3 DOWNGRADE parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequ
- CVE-2024-4841 LOW 3.3 DOWNGRADE A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_
- CVE-2024-4403 HIGH 8.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollm
FAQ
How do I fix lollms-webui vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lollms-webui being exploited right now?
None of the tracked lollms-webui CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lollms-webui CVE should I patch first?
CVE-2024-5125 currently ranks highest (37/100): parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequ.