CVE-2024-9415 in superagi

Résumé

par MITRE • 20/03/2025

A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote code execution or overwriting any file on the server.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: @huntr Ai
• Réserver: 01/10/2024
• Divulgation: 20/03/2025
• Modérer: accepté
• Entrée: VDB-300335
• CPE: prêt
• CWE: CWE-22 (confirmé)
• CVSS: 8.8 (CNA)
• EPSS: 0.01365
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-9415
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-9415
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-9415/