CVE-2024-8537: Path Traversal in modelscope/agentscope
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8537?
CVE-2024-8537 is a critical severity vulnerability due to its potential impact on file deletion from the filesystem.
How do I fix CVE-2024-8537?
To mitigate CVE-2024-8537, ensure proper input validation and implement strict access controls on the /delete-workflow endpoint.
What type of vulnerability is CVE-2024-8537?
CVE-2024-8537 is a path traversal vulnerability that allows unauthorized file access.
Which software versions are affected by CVE-2024-8537?
CVE-2024-8537 affects all versions of the modelscope/agentscope application.
What can attackers do with CVE-2024-8537?
Attackers can exploit CVE-2024-8537 to delete arbitrary files from the filesystem via the /delete-workflow endpoint.