CVE-2024-8487: CORS Vulnerability in modelscope/agentscope
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8487?
CVE-2024-8487 is a high severity vulnerability due to its potential to allow unauthorized access to the agentscope API.
How do I fix CVE-2024-8487?
To fix CVE-2024-8487, update the agentscope to the latest version that includes proper CORS configuration.
What impact does CVE-2024-8487 have?
CVE-2024-8487 allows any external domain to make unauthorized requests to the API, posing a security risk for sensitive data.
Which software versions are affected by CVE-2024-8487?
CVE-2024-8487 affects versions of modelscope/agentscope prior to v0.0.4.
How can I test for CVE-2024-8487?
You can test for CVE-2024-8487 by attempting to access the agentscope API from untrusted origins and observing the response.