CVE-2024-8953

9.8CRITICAL

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted in

게시됨: 3/20/2025업데이트됨: 4/1/2025
NVD에서 보기MITRE에서 보기

설명

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.

AI 분석AI 기반

영향받는 제품

composiocomposio
0.4.3

참조