AgentScope stored cross-site scripting (XSS) vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-8556 · ADVISORY
• modelscope/agentscope · PACKAGE
• modelscope/agentscope · WEB
• huntr.com/bounties/8439f16b-5256-4466-bb7d-371572572a4b · WEB
• pypi.org/project/agentscope · PACKAGE
• GitHub Advisory GHSA-6mf6-7j75-2m6f · ADVISORY

agentscope のその他の脆弱性

• CVE-2026-6606高 7.3A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the fi…
• CVE-2026-6605高 7.3A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src…
• CVE-2026-6604高 7.3A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai…
• CVE-2026-6603高 7.3A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/exe…
• CVE-2024-8551緊急 9.1A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fi…