Description (CNA)
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, SpiderTools.scrape_page validates only the initial URL and lets requests.Session.get follow redirects automatically, so a public-looking URL can redirect to a loopback, private, link-local, or metadata address without revalidation. The redirected response body is returned through scrape_page and its extract_links, crawl, and extract_text callers, allowing disclosure from otherwise blocked services. This issue is fixed in praisonaiagents 1.6.59.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MervinPraison / PraisonAI | affected < 4.6.59 |
| MervinPraison / praisonaiagents | affected < 1.6.59 |
CWE
CWE-918
References
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h9p-93hq-q7h6
- https://github.com/MervinPraison/PraisonAI/commit/b4270173d4123fb1ee8910588f0896668ee21b59
- https://github.com/MervinPraison/PraisonAI/releases/tag/v4.6.59
ADP enrichment
No English description supplied.
No references supplied.