Server Side Request Forgery (SSRF)

🗓️ 25 Mar 2025 04:32:02Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 9 Views

composio_core has a Server Side Request Forgery vulnerability in the WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-8952	20 Mar 202516:18	–	circl
CNNVD	Composio 安全漏洞	20 Mar 202500:00	–	cnnvd
CVE	CVE-2024-8952	20 Mar 202510:10	–	cve
Cvelist	CVE-2024-8952 SSRF in composiohq/composio	20 Mar 202510:10	–	cvelist
EUVD	EUVD-2025-6877	3 Oct 202520:07	–	euvd
Github Security Blog	composio Server-Side Request Forgery (SSRF) vulnerability	20 Mar 202512:32	–	github
NVD	CVE-2024-8952	20 Mar 202510:15	–	nvd
OSV	GHSA-QVG9-VP87-H3HR composio Server-Side Request Forgery (SSRF) vulnerability	20 Mar 202512:32	–	osv
RedhatCVE	CVE-2024-8952	22 Mar 202512:44	–	redhatcve
Snyk	Server-side Request Forgery (SSRF)	20 Mar 202512:32	–	snyk

Vulners

Node

composio_core composio_coreRange0.0.1–0.7.11python

OR

composio_core composio_coreMatch0.1.100python

OR

composio_core composio_coreMatch0.1.101python

OR

composio_core composio_coreMatch0.1.82python

OR

composio_core composio_coreMatch0.1.83python

OR

composio_core composio_coreMatch0.1.84python

OR

composio_core composio_coreMatch0.1.87python

OR

composio_core composio_coreMatch0.1.88python

OR

composio_core composio_coreMatch0.1.89python

OR

composio_core composio_coreMatch0.1.90python

OR

composio_core composio_coreMatch0.1.91python

OR

composio_core composio_coreMatch0.1.92python

OR

composio_core composio_coreMatch0.1.93python

OR

composio_core composio_coreMatch0.1.94python

OR

composio_core composio_coreMatch0.1.95python

OR

composio_core composio_coreMatch0.1.96python

OR

composio_core composio_coreMatch0.1.97python

OR

composio_core composio_coreMatch0.1.98python

OR

composio_core composio_coreMatch0.1.99python

OR

composio_core composio_coreMatch0.2.0python

OR

composio_core composio_coreMatch0.2.1python

OR

composio_core composio_coreMatch0.2.10python

OR

composio_core composio_coreMatch0.2.11python

OR

composio_core composio_coreMatch0.2.12python

OR

composio_core composio_coreMatch0.2.14python

OR

composio_core composio_coreMatch0.2.15python

OR

composio_core composio_coreMatch0.2.16python

OR

composio_core composio_coreMatch0.2.17python

OR

composio_core composio_coreMatch0.2.18python

OR

composio_core composio_coreMatch0.2.19python

OR

composio_core composio_coreMatch0.2.2python

OR

composio_core composio_coreMatch0.2.20python

OR

composio_core composio_coreMatch0.2.21python

OR

composio_core composio_coreMatch0.2.22python

OR

composio_core composio_coreMatch0.2.3python

OR

composio_core composio_coreMatch0.2.32python

OR

composio_core composio_coreMatch0.2.33python

OR

composio_core composio_coreMatch0.2.34python

OR

composio_core composio_coreMatch0.2.35python

OR

composio_core composio_coreMatch0.2.36python

OR

composio_core composio_coreMatch0.2.36rc1python

OR

composio_core composio_coreMatch0.2.36rc2python

OR

composio_core composio_coreMatch0.2.37python

OR

composio_core composio_coreMatch0.2.38python

OR

composio_core composio_coreMatch0.2.39python

OR

composio_core composio_coreMatch0.2.4python

OR

composio_core composio_coreMatch0.2.40python

OR

composio_core composio_coreMatch0.2.41python

OR

composio_core composio_coreMatch0.2.44python

OR

composio_core composio_coreMatch0.2.46python

OR

composio_core composio_coreMatch0.2.47python

OR

composio_core composio_coreMatch0.2.48python

OR

composio_core composio_coreMatch0.2.49python

OR

composio_core composio_coreMatch0.2.5python

OR

composio_core composio_coreMatch0.2.50python

OR

composio_core composio_coreMatch0.2.51python

OR

composio_core composio_coreMatch0.2.52python

OR

composio_core composio_coreMatch0.2.54python

OR

composio_core composio_coreMatch0.2.55python

OR

composio_core composio_coreMatch0.2.56python

OR

composio_core composio_coreMatch0.2.59python

OR

composio_core composio_coreMatch0.2.6python

OR

composio_core composio_coreMatch0.2.60python

OR

composio_core composio_coreMatch0.2.63python

OR

composio_core composio_coreMatch0.2.64python

OR

composio_core composio_coreMatch0.2.7python

OR

composio_core composio_coreMatch0.2.8python

OR

composio_core composio_coreMatch0.2.9python

OR

composio_core composio_coreMatch0.3.0python

OR

composio_core composio_coreMatch0.3.1python

OR

composio_core composio_coreMatch0.3.10python

OR

composio_core composio_coreMatch0.3.11python

OR

composio_core composio_coreMatch0.3.12python

OR

composio_core composio_coreMatch0.3.13python

OR

composio_core composio_coreMatch0.3.14python

OR

composio_core composio_coreMatch0.3.15python

OR

composio_core composio_coreMatch0.3.16python

OR

composio_core composio_coreMatch0.3.17python

OR

composio_core composio_coreMatch0.3.18python

OR

composio_core composio_coreMatch0.3.18rc0python

OR

composio_core composio_coreMatch0.3.18rc1python

OR

composio_core composio_coreMatch0.3.18rc2python

OR

composio_core composio_coreMatch0.3.19python

OR

composio_core composio_coreMatch0.3.2python

OR

composio_core composio_coreMatch0.3.20python

OR

composio_core composio_coreMatch0.3.20rc0python

OR

composio_core composio_coreMatch0.3.20rc1python

OR

composio_core composio_coreMatch0.3.22python

OR

composio_core composio_coreMatch0.3.23python

OR

composio_core composio_coreMatch0.3.23rc0python

OR

composio_core composio_coreMatch0.3.24python

OR

composio_core composio_coreMatch0.3.25python

OR

composio_core composio_coreMatch0.3.26python

OR

composio_core composio_coreMatch0.3.27python

OR

composio_core composio_coreMatch0.3.28python

OR

composio_core composio_coreMatch0.3.29python

OR

composio_core composio_coreMatch0.3.3python

OR

composio_core composio_coreMatch0.3.30python

OR

composio_core composio_coreMatch0.3.4python

OR

composio_core composio_coreMatch0.3.5python

OR

composio_core composio_coreMatch0.3.6python

OR

composio_core composio_coreMatch0.3.7python

OR

composio_core composio_coreMatch0.3.9python

OR

composio_core composio_coreMatch0.3.9rc1python

OR

composio_core composio_coreMatch0.3.9rc2python

OR

composio_core composio_coreMatch0.3.9rc3python

OR

composio_core composio_coreMatch0.3.9rc4python

OR

composio_core composio_coreMatch0.4.0python

OR

composio_core composio_coreMatch0.4.1python

OR

composio_core composio_coreMatch0.4.2python

OR

composio_core composio_coreMatch0.4.2rc1python

OR

composio_core composio_coreMatch0.4.2rc2python

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8952
huntr	www.huntr.com/bounties/d1acdd38-10d7-45df-9df0-9fc71f0e1c2a
github	www.github.com/ComposioHQ/composio

13 Dec 2025 07:43Current

7High risk

Vulners AI Score7

CVSS 3.17.5

CVSS 36.8

EPSS0.00151

SSVC

server side request forgery insufficent input validation internal resource access endpoint vulnerability.