CVE-2024-8958
Unrestricted File Write and Read in composiohq/composio
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Unrestricted File Write and Read in composiohq/composio
In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file paths, an attacker can read and write files anywhere on the server, potentially leading to privilege escalation or remote code execution.
Reserved 2024-09-17 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-434 Unrestricted Upload of File with Dangerous Type
huntr.com/bounties/e152b094-0593-428e-b813-068d2390ce68
Support options
