logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2024-5182

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2024-5182

Description:
A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the `model` parameter during the model deletion process to delete arbitrary files. Specifically, by crafting a request with a manipulated `model` parameter, an attacker can traverse the directory structure and target files outside of the intended directory, leading to the deletion of sensitive data. This vulnerability is due to insufficient input validation and sanitization of the `model` parameter.
Last updated date:
08/27/2024
Type:
exploit
Confidence:
HIGH
Date of publishing:
08/27/2024
Reference url to background

https://huntr.com/bounties/f7a87f29-c22a-48e8-9fce-b6d5a273e545

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy