tocsin

CVE-2024-8501

2 advisories.

PyPI/agentscope CVE-2024-8501: high 7.5, EPSS 1.03%

AgentScope arbitrary file download vulnerability in rpc_agent_client

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-0.0.4

Fixed versions

No fixed version in the source.

Sources

CVE-2024-8501 · published · modified · JSON

PyPI/agentscope CVE-2024-8501: high 8.8, EPSS 1.03%

An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpc_agent's

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-0.0.4

Fixed versions

No fixed version in the source.

Sources

CVE-2024-8501 · published · modified · JSON