3 matches found
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Path-Traversal - Arbitrary File Write in Assemblyline Service ClientIMPORTANT: This vulnerability is valid if you decide to use the assemblyline-service-client outside of the normal practice to using Assemblyline in a production environment. In practice, this code should always be executed within...
4.2CVSS6.2AI score0.00584EPSS
SaveExploits0References6Affected Software1
CVE-2025-55013
The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4. In versions below 4.6.1.dev138, the Assemblyline 4 Service Client taskhandler.py accepts a SHA-256 value returned by the service server and uses it directly as a local...
4.2CVSS7.1AI score0.00584EPSS
SaveExploits0References1
20