CVE-2024-8953 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to…
Critical CVSS: 9.8

CVE-2024-8953

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.
Vendor
Composio
Product
Composio
CWE
CWE-627
Yayın Tarihi
2025-03-20 10:15:44
Güncelleme
2025-04-01 20:30:28
Source Identifier
security@huntr.dev
KEV Date Added
-

Kategoriler

CWE-627 Composio CRITICAL Composio 2025

Referanslar

https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c