CVE-2024-8550
1 advisory.
PyPI/agentscope CVE-2024-8550: high 7.5, EPSS 0.52%
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server,
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.4 |
Fixed versions
No fixed version in the source.
Sources
CVE-2024-8550 · published · modified · JSON