CVE-2024-8865

Description

A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of the file composioserverapi.py. The manipulation of the argument file leads to path traversal. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information

Base Score

4.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.325

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2024-8865 are affected in Python-composio-core 0.5.8	Windows
Vulnerabilities CVE-2024-8865 are affected in Python-composio-core for linux 0.5.8	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234