AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

ImpactThis vulnerability may lead to: Information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. ReproduceFollow these steps to set up a test environment for reproducing the vulnerability:1. Install dependencies and clone the repository: bash pip...