Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/11/07 6:30 p.m.13 views

AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

6.5CVSS6.9AI score0.00308EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder