What’s Vulnerable › Products

parisneo/lollms-webui vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your parisneo/lollms-webui version is affected

Latest parisneo/lollms-webui vulnerabilities

• CVE-2024-2356 — Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui (CVSS 9.6)
• CVE-2024-5125 — XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui (CVSS 7.3)
• CVE-2024-6971 — Path Traversal in parisneo/lollms-webui (CVSS 4.4)
• CVE-2024-4839 — CSRF in Servers Configurations in parisneo/lollms-webui (CVSS 3.3)
• CVE-2024-4841 — Path Traversal in parisneo/lollms-webui (CVSS 3.3)
• CVE-2024-4403 — CSRF in restart_program in parisneo/lollms-webui (CVSS 8.8)
• CVE-2024-4267 — Remote Code Execution in parisneo/lollms-webui (CVSS 9.8)
• CVE-2024-1646 — Authentication Bypass in parisneo/lollms-webui (CVSS 8.2)
• CVE-2024-1601 — SQL Injection in parisneo/lollms-webui (CVSS 9.8)
• CVE-2024-1569 — Uncontrolled Resource Consumption in parisneo/lollms-webui (CVSS 7.5)