Submit #593615: OpenBMB XAgent <=v1.0.0 Path Traversalinfo

TitleOpenBMB XAgent <=v1.0.0 Path Traversal
DescriptionXAgent does not perform permission authentication on the `/conv/community ` route and does not verify the parameters passed, resulting in path traversal.
Source⚠️ https://github.com/OpenBMB/XAgent/issues/415
User
 Anonymous User
Submission06/10/2025 04:06 (10 months ago)
Moderation06/19/2025 08:59 (9 days later)
StatusAccepted
VulDB entry313285 [OpenBMB XAgent up to 1.0.0 /conv/community path traversal]
Points15

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!