CVE-2024-8953

9.8CRITICAL

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted in

Опубликовано: 3/20/2025Обновлено: 4/1/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.

ИИ-АнализНа базе ИИ

Затронутые продукты

composiocomposio
0.4.3

Ссылки