CVE-2024-34524: Authentication Bypass Using an Alternate Path or Channel

In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...

CVE-2024-34524

In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...

CVE-2024-34524

In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...

CVE-2024-34524

In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...

OpenAgents 安全漏洞

OpenAgents is an open language agent platform from xlang-ai open source. A security vulnerability exists in OpenAgents fe73ac4 and earlier versions, which stems from a vulnerability that allows an attacker to bypass the allowedfile protection mechanism by using an incorrect file extension...

CVE-2024-34524

XLANG OpenAgents (versions through fe73ac4 ) is vulnerable to a security flaw where the allowed_file protection mechanism can be bypassed. An attacker can achieve this bypass by providing an incorrect file extension that does not match the actual nature of the file content. The impact is characte...