Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-8952

SSRF in composiohq/composio

Description

A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and interact with local services on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

composiohq composiohq/composio

  • unspecified to ≤ latestaffected

References