| Titolo | TransformerOptimus SuperAGI <=v0.0.14 Path Traversal |
|---|
| Descrizione | Due to improper implementation, SuperAGI EmailToolKit does not validate the file names of email attachments, resulting in path traversal when saving. |
|---|
| Fonte | ⚠️ https://github.com/TransformerOptimus/SuperAGI/issues/1466 |
|---|
| Utente | Anonymous User |
|---|
| Sottomissione | 10/06/2025 04:03 (1 Anno fa) |
|---|
| Moderazione | 19/06/2025 08:56 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 313284 [TransformerOptimus SuperAGI fino a 0.0.14 EmailToolKit read_email.py download_attachment filename directory traversal] |
|---|
| Punti | 15 |
|---|