Invia #593615: OpenBMB XAgent <=v1.0.0 Path Traversalinformazioni

TitoloOpenBMB XAgent <=v1.0.0 Path Traversal
DescrizioneXAgent does not perform permission authentication on the `/conv/community ` route and does not verify the parameters passed, resulting in path traversal.
Fonte⚠️ https://github.com/OpenBMB/XAgent/issues/415
Utente
 Anonymous User
Sottomissione10/06/2025 04:06 (1 Anno fa)
Moderazione19/06/2025 08:59 (9 days later)
StatoAccettato
Voce VulDB313285 [OpenBMB XAgent fino a 1.0.0 /conv/community directory traversal]
Punti15

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you need the next level of professionalism?

Upgrade your account now!