THREATPORT/VULNERABILITY/CVE-2024-3429
CRITICAL SEVERITY

CVE-2024-3429

Lollms vulnerability

CVSS
9.8
EPSS
28.3%
EPSS pct
98th
Exploited
No known
A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_endpoint` and `sanitize_path` functions in `lollms_core\lollms\security.py`. This vulnerability allows for arbitrary file reading when the application is running on Windows. The issue arises due to insufficient sanitization of user-supplied input, enabling attackers to bypass the path traversal protection mechanisms by crafting malicious input. Successful exploitation could lead to unauthorized access to sensitive files, information disclosure, and potentially a denial of service (DoS) condition by including numerous large or resource-intensive files. This vulnerability affects the latest version prior to 9.6.
Affected vendor
Lollms
Affected product
Lollms
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)
Published
2024-06-06

Risk analysis

Based on its CVSS vector, this vulnerability is exploitable over the network, low attack complexity, requiring no privileges, no user interaction. Successful exploitation leads to high impact to confidentiality, high impact to integrity, high impact to availability.

Its EPSS score of 28.3% reflects a moderate probability of exploitation activity in the wild over the next 30 days, placing it above 98% of all scored CVEs.

Check your external exposure to CVE-2024-3429

  • Confirm whether Lollms Lollms is running on any internet-facing host or subdomain.
  • Match discovered service fingerprints against the version affected by CVE-2024-3429.
  • Prioritise remediation if the asset is public, business-critical, or near authentication/payment flows.

How ThreatPort helps with CVE-2024-3429

ThreatPort's external attack surface scanner checks your internet-facing assets — agentlessly, from the outside in — for the exposed services and versions that CVE-2024-3429 affects, then prioritises the finding by real risk using CISA KEV and FIRST.org EPSS.

Run a free external exposure scan

Are you exposed to CVE-2024-3429?

Run an instant, non-intrusive external scan to check your attack surface for CVE-2024-3429.

Start free scan

No credit card. Agentless.

Related vulnerabilities

CRITICAL
CVE-2022-1378
Diaenergie vulnerability
CRITICAL
CVE-2022-28561
Ax12 Firmware vulnerability
CRITICAL
CVE-2022-28082
Ax12 Firmware vulnerability