Lucene search
+L

4 matches found

OSV
OSV
added 2025/11/07 6:30 p.m.5 views

GHSA-VM2F-46XC-5JC3 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

7.1CVSS6.9AI score0.00308EPSS
SaveExploits1References3
Rows per page
Query Builder