Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Server-Side Request Forgery (SSRF)

🗓️ 25 Mar 2025 05:56:05Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

composio_core has a Server-Side Request Forgery vulnerability allowing unauthorized file access.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNNVD		Composio 安全漏洞
20 Mar 202500:00
–cnnvd
CVE		CVE-2024-8955
20 Mar 202510:09
–cve
Cvelist		CVE-2024-8955 SSRF in composiohq/composio
20 Mar 202510:09
–cvelist
EUVD		EUVD-2025-6889
3 Oct 202520:07
–euvd
Github Security Blog		composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
20 Mar 202512:32
–github
NVD		CVE-2024-8955
20 Mar 202510:15
–nvd
OSV		GHSA-38MG-WM59-G64X composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
20 Mar 202512:32
–osv
RedhatCVE		CVE-2024-8955
22 Mar 202512:48
–redhatcve
Snyk		Improper Neutralization of Data within XPath Expressions ('XPath Injection')
20 Mar 202512:32
–snyk
vulnersOsv		agentic-fleet (>=0.1.6 <=0.4.1), composio (=0.1.1) +35 more potentially affected by CVE-2024-8955 via composio-core (>=0.3.13 <=0.7.21)
20 Mar 202512:32
–vulnersosv
Rows per page
Vulners
Node
composio_corecomposio_coreRange0.0.1–0.7.11python
OR
composio_corecomposio_coreMatch0.1.100python
OR
composio_corecomposio_coreMatch0.1.101python
OR
composio_corecomposio_coreMatch0.1.82python
OR
composio_corecomposio_coreMatch0.1.83python
OR
composio_corecomposio_coreMatch0.1.84python
OR
composio_corecomposio_coreMatch0.1.87python
OR
composio_corecomposio_coreMatch0.1.88python
OR
composio_corecomposio_coreMatch0.1.89python
OR
composio_corecomposio_coreMatch0.1.90python
OR
composio_corecomposio_coreMatch0.1.91python
OR
composio_corecomposio_coreMatch0.1.92python
OR
composio_corecomposio_coreMatch0.1.93python
OR
composio_corecomposio_coreMatch0.1.94python
OR
composio_corecomposio_coreMatch0.1.95python
OR
composio_corecomposio_coreMatch0.1.96python
OR
composio_corecomposio_coreMatch0.1.97python
OR
composio_corecomposio_coreMatch0.1.98python
OR
composio_corecomposio_coreMatch0.1.99python
OR
composio_corecomposio_coreMatch0.2.0python
OR
composio_corecomposio_coreMatch0.2.1python
OR
composio_corecomposio_coreMatch0.2.10python
OR
composio_corecomposio_coreMatch0.2.11python
OR
composio_corecomposio_coreMatch0.2.12python
OR
composio_corecomposio_coreMatch0.2.14python
OR
composio_corecomposio_coreMatch0.2.15python
OR
composio_corecomposio_coreMatch0.2.16python
OR
composio_corecomposio_coreMatch0.2.17python
OR
composio_corecomposio_coreMatch0.2.18python
OR
composio_corecomposio_coreMatch0.2.19python
OR
composio_corecomposio_coreMatch0.2.2python
OR
composio_corecomposio_coreMatch0.2.20python
OR
composio_corecomposio_coreMatch0.2.21python
OR
composio_corecomposio_coreMatch0.2.22python
OR
composio_corecomposio_coreMatch0.2.3python
OR
composio_corecomposio_coreMatch0.2.32python
OR
composio_corecomposio_coreMatch0.2.33python
OR
composio_corecomposio_coreMatch0.2.34python
OR
composio_corecomposio_coreMatch0.2.35python
OR
composio_corecomposio_coreMatch0.2.36python
OR
composio_corecomposio_coreMatch0.2.36rc1python
OR
composio_corecomposio_coreMatch0.2.36rc2python
OR
composio_corecomposio_coreMatch0.2.37python
OR
composio_corecomposio_coreMatch0.2.38python
OR
composio_corecomposio_coreMatch0.2.39python
OR
composio_corecomposio_coreMatch0.2.4python
OR
composio_corecomposio_coreMatch0.2.40python
OR
composio_corecomposio_coreMatch0.2.41python
OR
composio_corecomposio_coreMatch0.2.44python
OR
composio_corecomposio_coreMatch0.2.46python
OR
composio_corecomposio_coreMatch0.2.47python
OR
composio_corecomposio_coreMatch0.2.48python
OR
composio_corecomposio_coreMatch0.2.49python
OR
composio_corecomposio_coreMatch0.2.5python
OR
composio_corecomposio_coreMatch0.2.50python
OR
composio_corecomposio_coreMatch0.2.51python
OR
composio_corecomposio_coreMatch0.2.52python
OR
composio_corecomposio_coreMatch0.2.54python
OR
composio_corecomposio_coreMatch0.2.55python
OR
composio_corecomposio_coreMatch0.2.56python
OR
composio_corecomposio_coreMatch0.2.59python
OR
composio_corecomposio_coreMatch0.2.6python
OR
composio_corecomposio_coreMatch0.2.60python
OR
composio_corecomposio_coreMatch0.2.63python
OR
composio_corecomposio_coreMatch0.2.64python
OR
composio_corecomposio_coreMatch0.2.7python
OR
composio_corecomposio_coreMatch0.2.8python
OR
composio_corecomposio_coreMatch0.2.9python
OR
composio_corecomposio_coreMatch0.3.0python
OR
composio_corecomposio_coreMatch0.3.1python
OR
composio_corecomposio_coreMatch0.3.10python
OR
composio_corecomposio_coreMatch0.3.11python
OR
composio_corecomposio_coreMatch0.3.12python
OR
composio_corecomposio_coreMatch0.3.13python
OR
composio_corecomposio_coreMatch0.3.14python
OR
composio_corecomposio_coreMatch0.3.15python
OR
composio_corecomposio_coreMatch0.3.16python
OR
composio_corecomposio_coreMatch0.3.17python
OR
composio_corecomposio_coreMatch0.3.18python
OR
composio_corecomposio_coreMatch0.3.18rc0python
OR
composio_corecomposio_coreMatch0.3.18rc1python
OR
composio_corecomposio_coreMatch0.3.18rc2python
OR
composio_corecomposio_coreMatch0.3.19python
OR
composio_corecomposio_coreMatch0.3.2python
OR
composio_corecomposio_coreMatch0.3.20python
OR
composio_corecomposio_coreMatch0.3.20rc0python
OR
composio_corecomposio_coreMatch0.3.20rc1python
OR
composio_corecomposio_coreMatch0.3.22python
OR
composio_corecomposio_coreMatch0.3.23python
OR
composio_corecomposio_coreMatch0.3.23rc0python
OR
composio_corecomposio_coreMatch0.3.24python
OR
composio_corecomposio_coreMatch0.3.25python
OR
composio_corecomposio_coreMatch0.3.26python
OR
composio_corecomposio_coreMatch0.3.27python
OR
composio_corecomposio_coreMatch0.3.28python
OR
composio_corecomposio_coreMatch0.3.29python
OR
composio_corecomposio_coreMatch0.3.3python
OR
composio_corecomposio_coreMatch0.3.30python
OR
composio_corecomposio_coreMatch0.3.4python
OR
composio_corecomposio_coreMatch0.3.5python
OR
composio_corecomposio_coreMatch0.3.6python
OR
composio_corecomposio_coreMatch0.3.7python
OR
composio_corecomposio_coreMatch0.3.9python
OR
composio_corecomposio_coreMatch0.3.9rc1python
OR
composio_corecomposio_coreMatch0.3.9rc2python
OR
composio_corecomposio_coreMatch0.3.9rc3python
OR
composio_corecomposio_coreMatch0.3.9rc4python
OR
composio_corecomposio_coreMatch0.4.0python
OR
composio_corecomposio_coreMatch0.4.1python
OR
composio_corecomposio_coreMatch0.4.2python
OR
composio_corecomposio_coreMatch0.4.2rc1python
OR
composio_corecomposio_coreMatch0.4.2rc2python
OR
composio_corecomposio_coreMatch0.4.3python
OR
composio_corecomposio_coreMatch0.4.4python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 07:07Current
7.2High risk
Vulners AI Score7.2
CVSS 3.17.5
CVSS 36.8
EPSS0.00145
SSVC
server-side request forgerycomposio_core vulnerabilityinsufficient validationuser-supplied urlsarbitrary file access
2