https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 02:53:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-2168 EUVD-2026-2168 https://cve.radiocsirt.org/vuln/euvd-2026-2168 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3322 <p>A path traversal vulnerability exists in the &#39;cyber_security/codeguard&#39; native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the &#39;process_folder&#39; function within &#39;lollms-webui/zoos/personalities_zoo/cyber_security/codeguard/scripts/processor.py&#39;. Specifically, the function fails to properly sanitize user-supplied input for the &#39;code_folder_path&#39;, allowing an attacker to specify arbitrary paths using &#39;../&#39; or absolute paths. This flaw leads to arbitrary file read and overwrite capabilities in specified directories without limitations, posing a significant risk of sensitive information disclosure and unauthorized file manipulation.</p> <p>A path traversal vulnerability exists in the &#39;cyber_security/codeguard&#39; native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the &#39;process_folder&#39; function within &#39;lollms-webui/zoos/personalities_zoo/cyber_security/codeguard/scripts/processor.py&#39;. Specifically, the function fails to properly sanitize user-supplied input for the &#39;code_folder_path&#39;, allowing an attacker to specify arbitrary paths using &#39;../&#39; or absolute paths. This flaw leads to arbitrary file read and overwrite capabilities in specified directories without limitations, posing a significant risk of sensitive information disclosure and unauthorized file manipulation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3322 https://cve.radiocsirt.org/vuln/ghsa-4jg5-2m6g-5c39 <p>A path traversal vulnerability exists in the &#39;cyber_security/codeguard&#39; native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the &#39;process_folder&#39; function within &#39;lollms-webui/zoos/personalities_zoo/cyber_security/codeguard/scripts/processor.py&#39;. Specifically, the function fails to properly sanitize user-supplied input for the &#39;code_folder_path&#39;, allowing an attacker to specify arbitrary paths using &#39;../&#39; or absolute paths. This flaw leads to arbitrary file read and overwrite capabilities in specified directories without limitations, posing a significant risk of sensitive information disclosure and unauthorized file manipulation.</p> <p>A path traversal vulnerability exists in the &#39;cyber_security/codeguard&#39; native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the &#39;process_folder&#39; function within &#39;lollms-webui/zoos/personalities_zoo/cyber_security/codeguard/scripts/processor.py&#39;. Specifically, the function fails to properly sanitize user-supplied input for the &#39;code_folder_path&#39;, allowing an attacker to specify arbitrary paths using &#39;../&#39; or absolute paths. This flaw leads to arbitrary file read and overwrite capabilities in specified directories without limitations, posing a significant risk of sensitive information disclosure and unauthorized file manipulation.</p> https://cve.radiocsirt.org/vuln/ghsa-4jg5-2m6g-5c39 https://cve.radiocsirt.org/vuln/gsd-2024-3322 gsd-2024-3322 https://cve.radiocsirt.org/vuln/gsd-2024-3322