CVE-2024-34524

OpenAgents (XLANG) prior to/through commit fe73ac4 contains a vulnerability in the allowed_file protection mechanism that can be bypassed by uploading content with an incorrect file extension for the content type. The issue affects Software OpenAgents as described by multiple sources (Red Hat, NV...

CVE-2024-34524

In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...

CVE-2024-34524

In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...

OpenAgents 安全漏洞

OpenAgents is an open language agent platform from xlang-ai open source. A security vulnerability exists in OpenAgents fe73ac4 and earlier versions, which stems from a vulnerability that allows an attacker to bypass the allowedfile protection mechanism by using an incorrect file extension...