제출 #593614: TransformerOptimus SuperAGI <=v0.0.14 Path Traversal
| 제목 | TransformerOptimus SuperAGI <=v0.0.14 Path Traversal |
|---|---|
| 설명 | Due to improper implementation, SuperAGI EmailToolKit does not validate the file names of email attachments, resulting in path traversal when saving. |
| 원천 | ⚠️ https:/ |
| 사용자 | Anonymous User |
| 제출 | 2025. 06. 10. AM 04:03 (10 개월 ago) |
| 모더레이션 | 2025. 06. 19. AM 08:56 (9 days later) |
| 상태 | 수락 |
| VulDB 항목 | 313284 [TransformerOptimus SuperAGI 까지 0.0.14 EmailToolKit read_email.py download_attachment filename 디렉토리 순회] |
| 포인트들 | 15 |