ExternalVendorCode/lollms-webui
1
0
Fork 0
mirror of https://github.com/ParisNeo/lollms-webui.git synced 2025-02-21 01:31:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed path traversal report on huntr: 3cf80890-2d8a-4fc7-8e0e-6d4bf648b3ea

Browse Source
This commit is contained in:
Saifeddine ALOUI 2024-09-17 01:24:23 +02:00
parent c85644bf64
commit 542e0273a1
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
endpoints/lollms_apps.py
View File

@ -591,7 +591,8 @@ def run_server(app_path: Path):
@router.post("/apps/start_server")
async def start_app_server(request: OpenFolderRequest):
check_access(lollmsElfServer, request.client_id)
app_path = lollmsElfServer.lollms_paths.apps_zoo_path / request.app_name
app_name = sanitize_path(request.app_name)
app_path = lollmsElfServer.lollms_paths.apps_zoo_path / app_name
if not app_path.exists():
raise HTTPException(status_code=404, detail="App not found")

2
lollms_core

@ -1 +1 @@
Subproject commit 04500070eba0729a40c45b17e42a6c6089b29549
Subproject commit 676c80f825f93b96bca37fefb6744e7b82df3851