Agentscope@0.0.4 Security Vulnerabilities and Issues — Agentscope@0.0.4 CVE List

Lucene search

ModelscopeAgentscope0.0.4

3 matches found

CVE•added 2025/03/20 10:15 a.m.•59 views

CVE-2024-8487

A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized dat...

9.8CVSS7.2AI score0.0003EPSS

CVE•added 2025/03/20 10:15 a.m.•41 views

CVE-2024-8501

An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpc_agent's host by exploiting the download_file method. This can lead to unauthorized access to sensitive info...

8.8CVSS7.7AI score0.00097EPSS

CVE•added 2025/03/20 10:15 a.m.•40 views

CVE-2024-8524

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint.

7.5CVSS7.3AI score0.00368EPSS