Products
UNKNOWN
Source
security@huntr.dev
Tags
CVE-2024-3121 details
Published : June 24, 2024, 12:15 a.m.
Last Modified : June 24, 2024, 12:57 p.m.
Last Modified : June 24, 2024, 12:57 p.m.
Description
A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerability arises from the use of shell=True in the subprocess.Popen function, which allows an attacker to inject arbitrary commands by manipulating the env_name and python_version parameters. This issue could lead to a serious security breach as demonstrated by the ability to execute the 'whoami' command among potentially other harmful commands.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6.8 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. |
CVSS Data
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
6.8
Exploitability Score
0.9
Impact Score
5.9
Base Severity
MEDIUM
Vector String : CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
| URL | Source |
|---|---|
| https://huntr.com/bounties/db57c343-9b80-4c1c-9ab0-9eef92c9b27b | security@huntr.dev |
This website uses the NVD API, but is not approved or certified by it.