Lucene search
Veracode Vulnerability DatabaseVERACODE:41427HistoryJul 20, 2023 - 1:24 p.m.
Improper Validation
2023-07-2013:24:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
improper validation
ansi escape sequences
vulnerable
false messages
json-encoded
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
30.9%
agpt is vulnerable to Improper Validation. The vulnerability exists due to a lack of validated ANSI escape sequences in logs.py, which allow an attacker to publish false messages to the terminal by tricking the LLM into reciting JSON-encoded ANSI escape sequences.
Related
nvd
nvd
CVE-2023-37275
2023-07-13 23:15:10
osv
osv
CVE-2023-37275
2023-07-13 23:15:10
cvelist
cvelist
CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
2023-07-13 22:34:45
prion
prion
Command injection
2023-07-13 23:15:00
cve
cve
CVE-2023-37275
2023-07-13 23:15:10
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
30.9%
Related for VERACODE:41427