adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8438 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8438 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511412...

CVE-2024-8438

Summary: CVE-2024-8438 describes a path traversal in modelscope/agentscope v0.0.4 where the /api/file endpoint does not sanitize the path parameter, enabling reading arbitrary server files. The underlying impact is information disclosure with a high severity (CVSS3/7.5) but no exploitation detail...