CVE-2024-8953

9.8CRITICAL

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted in

发布于: 3/20/2025更新于: 4/1/2025
在NVD查看在MITRE查看

描述

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.

AI分析AI驱动

受影响产品

composiocomposio
0.4.3

参考资料