CORS Vulnerability in modelscope/agentscope

Vulnerability

Overview A Cross-Origin Resource Sharing (CORS) misconfiguration in AgentScope version v0.0.4 allows any external domain to make requests to the API [2]. The server does not properly restrict access to trusted origins, violating the same-origin policy [2].

Exploitation

An attacker can craft a malicious webpage that, when visited by a user authenticated to the AgentScope server, sends cross-origin requests to the API. No special network position is required; the attack can be performed from any external domain [2]. The vulnerability is exposed via the server's CORS headers.

Impact

Successful exploitation could lead to unauthorized data access and information disclosure, potentially compromising the integrity and confidentiality of the system [2]. The attacker may be able to read sensitive data or perform actions on behalf of the victim.

Mitigation

The vulnerability was reported via the Huntr bug bounty platform [3]. Users of AgentScope v0.0.4 should update to a patched version or apply appropriate CORS restrictions as recommended by the project maintainers [1].