← CVE Intelligence

CVE-2024-8958

Unrestricted File Write and Read in composiohq/composio PUBLISHED

Description (CNA)

In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file paths, an attacker can read and write files anywhere on the server, potentially leading to privilege escalation or remote code execution.

Affected (CNA)

Vendor / productVersions
composiohq / composiohq/composioaffected unspecified through latest

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.