CVE-2024-6581
published 2024-10-29CVE-2024-6581: A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete…
PriorityP344critical9CVSS 3.1
AVNACLPRLUIRSCCHIHAH
EPSS
0.60%
44.0th percentile
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| lollms | lollms | >= 0 < 328b960a0de2097e13654ac752253e9541521ddd | 328b960a0de2097e13654ac752253e9541521ddd |
| lollms | lollms | 0 – 9.5.1 | — |
| lollms | lord_of_large_language_models | — | — |
| parisneo | parisneo_lollms | >= unspecified < 9.9 | 9.9 |
CVSS provenance
nvdv3.19.0CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Lollms vulnerable to Cross-site Scripting
ghsa·2024-10-29
CVE-2024-6581 [MEDIUM] CWE-79 Lollms vulnerable to Cross-site Scripting
Lollms vulnerable to Cross-site Scripting
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.
OSV
Lollms vulnerable to Cross-site Scripting
osv·2024-10-29
CVE-2024-6581 [MEDIUM] Lollms vulnerable to Cross-site Scripting
Lollms vulnerable to Cross-site Scripting
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.
OSV
CVE-2024-6581: A vulnerability in the discussion image upload function of the Lollms application, version v9
osv·2024-10-29
CVE-2024-6581 CVE-2024-6581: A vulnerability in the discussion image upload function of the Lollms application, version v9
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-29
Published