composio Server-Side Request Forgery (SSRF) vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-8952 · ADVISORY
• ComposioHQ/composio · PACKAGE
• huntr.com/bounties/d1acdd38-10d7-45df-9df0-9fc71f0e1c2a · WEB
• pypi.org/project/composio-core · PACKAGE
• GitHub Advisory GHSA-qvg9-vp87-h3hr · ADVISORY

composio-core のその他の脆弱性

• CVE-2024-8955高 7.5A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to re…
• CVE-2024-8953緊急 9.8In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operation…
• CVE-2024-8865中 4.9A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of t…
• CVE-2024-8864高 8.8A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function…