CVE-2024-8550 | modelscope agentscope up to 0.0.4 /load-workflow filename exposure of sensitive system information to an unauthorized control sphere

A vulnerability classified as problematic was found in modelscope agentscope up to 0.0.4. Affected by this vulnerability is an unknown functionality of the file /load-workflow. The manipulation of the argument filename leads to exposure of sensitive system information to an unauthorized control sphere.

This vulnerability is known as CVE-2024-8550. The attack can be launched remotely. There is no exploit available.