CVE-2024-8524 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sen…
High CVSS: 7.5

CVE-2024-8524

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint.
Vendor
Modelscope
Product
Agentscope
CWE
CWE-22
Yayın Tarihi
2025-03-20 10:15:42
Güncelleme
2025-10-15 13:15:54
Source Identifier
security@huntr.dev
KEV Date Added
-

Kategoriler

CWE-22 Agentscope HIGH Modelscope 2025

Referanslar

https://huntr.com/bounties/cc4acf33-700d-4220-8a8a-db28f5c4cc8f https://huntr.com/bounties/cc4acf33-700d-4220-8a8a-db28f5c4cc8f