CVE-2024-2178 | parisneo lollms-webui lollms_personalities_infos.py copy_to_custom_personas name path traversal

A vulnerability, which was classified as problematic, has been found in parisneo lollms-webui. This issue affects the function copy_to_custom_personas of the file lollms_personalities_infos.py. The manipulation of the argument name leads to path traversal: ‘..filename’.

The identification of this vulnerability is CVE-2024-2178. The attack may be initiated remotely. There is no exploit available.