Approved changes feed: RSS · Atom

cpe:2.3:a:lollms:lollms_web_ui:9.9:*:*:*:*:*:*:*

part: a version: 9.9 update: *

VendorLollms (c462c41a-51fb-579f-8ef2-5b37366b074d)
ProductLollms Web Ui (0b1ee2ff-111a-5b86-a28c-8ca2d46629c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/parisneo/lollms-webui purl2cpe 2026-06-01 10:17:49.466091

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10047 vulnerable 2026-06-08 06:22:03.471980 Directory Listing Vulnerability in parisneo/lollms-webui
MEDIUM (5.3)
parisneo/lollms-webui versions v9.9 to the latest are vulnerable to a directory listing vulnerability. An attacker can list arbitrary directories on a Windows system by sending a specially crafted HTTP request to the /open_file endpoint.
Published: 2025-03-20T10:09:35.799Z
Updated: 2025-03-20T18:37:08.644Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.