A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint.
References
Configurations
History
01 Apr 2025, 20:31
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:modelscope:agentscope:0.0.4:*:*:*:*:*:*:* | |
| First Time |
Modelscope
Modelscope agentscope |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://huntr.com/bounties/cc4acf33-700d-4220-8a8a-db28f5c4cc8f - Exploit |
20 Mar 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-04-01 20:31
NVD link : CVE-2024-8524
Mitre link : CVE-2024-8524
JSON object : View
Products Affected
modelscope
- agentscope
CWE
No CWE.