PT-2025-12234

Name of the Vulnerable Software and Affected Versions modelscope/agentscope version 0.0.4 Description A directory traversal issue exists, allowing an attacker to read any local JSON file by sending a crafted POST request to the "/read-examples" endpoint. This enables the attacker to access...

CVE-2024-8524: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint...