CVE-2024-2548 | parisneo lollms-webui up to 9.4 on Windows Request Path(path).is_absolute absolute path traversal

A vulnerability has been found in parisneo lollms-webui up to 9.4 on Windows and classified as problematic. This vulnerability affects the function Path(path).is_absolute of the component Request Handler. The manipulation leads to absolute path traversal.

This vulnerability was named CVE-2024-2548. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.