A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote code execution or overwriting any file on the server.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/31bdf98c-5205-4c48-9bc7-9e780ba63398 | Exploit Third Party Advisory |
Configurations
History
29 Jul 2025, 19:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://huntr.com/bounties/31bdf98c-5205-4c48-9bc7-9e780ba63398 - Exploit, Third Party Advisory | |
| First Time |
Superagi
Superagi superagi |
|
| CPE | cpe:2.3:a:superagi:superagi:0.0.14:*:*:*:*:*:*:* |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-07-29 19:18
NVD link : CVE-2024-9415
Mitre link : CVE-2024-9415
JSON object : View
Products Affected
superagi
- superagi
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')