2 lines
3.8 KiB
JSON
2 lines
3.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"parisneo/lollms","vendor":"parisneo","versions":[{"lessThan":"2.2.0","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@huntr.dev"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lollms:lollms:*:*:*:*:*:*:*:*","matchCriteriaId":"7118851E-5C3C-499B-BBB5-0327B7FD85AF","versionEndIncluding":"2.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users. The `respond_request()` function in `backend/routers/friends.py` does not implement proper authorization checks, enabling Insecure Direct Object Reference (IDOR) attacks. Specifically, the `/api/friends/requests/{friendship_id}` endpoint fails to verify whether the authenticated user is part of the friendship or the intended recipient of the request. This vulnerability can lead to unauthorized access, privacy violations, and potential social engineering attacks. The issue has been addressed in version 2.2.0."},{"lang":"es","value":"Una vulnerabilidad de seguridad crítica en las versiones de parisneo/lollms hasta la 2.2.0 permite a cualquier usuario autenticado aceptar o rechazar solicitudes de amistad pertenecientes a otros usuarios. La función 'respond_request()' en 'backend/routers/friends.py' no implementa comprobaciones de autorización adecuadas, lo que permite ataques de Referencia Directa a Objeto Insegura (IDOR). Específicamente, el endpoint '/api/friends/requests/{friendship_id}' no verifica si el usuario autenticado es parte de la amistad o el destinatario previsto de la solicitud. Esta vulnerabilidad puede conducir a acceso no autorizado, violaciones de la privacidad y posibles ataques de ingeniería social. El problema ha sido abordado en la versión 2.2.0."}],"id":"CVE-2026-0562","lastModified":"2026-06-17T10:10:57.043","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.5,"source":"security@huntr.dev","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.5,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0562","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-30T15:34:27.114666Z","version":"2.0.3"}}]},"published":"2026-03-29T18:16:14.460","references":[{"source":"security@huntr.dev","tags":["Patch"],"url":"https://github.com/parisneo/lollms/commit/c46297799f8e1e23305373f8350746b905e0e83c"},{"source":"security@huntr.dev","tags":["Exploit","Issue Tracking","Third Party Advisory"],"url":"https://huntr.com/bounties/6aab01ca-a138-4a1d-bef9-3bce145359bf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://aydinnyunus.github.io/2026/04/18/idor-lollms-friend-request-cve-2026-0562/"}],"sourceIdentifier":"security@huntr.dev","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"security@huntr.dev","type":"Secondary"}]}
|