CVE-2025-56427 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.
High CVSS: 7.5

CVE-2025-56427

Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.
Vendor
Composio
Product
Composio
CWE
CWE-200
Yayın Tarihi
2025-12-04 16:16:21
Güncelleme
2025-12-16 17:52:17
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-200 Composio HIGH Composio 2025

Referanslar

https://github.com/ComposioHQ/composio/blob/master/python/composio/server/api.py#L278 https://github.com/TOAST-Research/pocs/blob/main/composio/composio_1.md https://github.com/TOAST-Research/pocs/blob/main/composio/composio_1.md