CVE-2024-9415 in superagi

الملخص

بحسب MITRE • 20/03/2025

A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote code execution or overwriting any file on the server.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• مسؤول: @huntr Ai
• حجز: 01/10/2024
• إفشاء: 20/03/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-300335
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 8.8 (CNA)
• EPSS: 0.01365
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-9415
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-9415
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-9415/