Directory Traversal in modelscope/agentscope

Vulnerability

Overview

CVE-2024-8524 describes a directory traversal vulnerability in AgentScope version 0.0.4, specifically within the /read-examples endpoint. The application fails to properly sanitize user-supplied file path input, enabling attackers to escape the intended examples directory [2][3].

Exploitation

An unauthenticated attacker can exploit this vulnerability by sending a crafted POST request to the /read-examples endpoint with a path parameter containing directory traversal sequences (e.g., ../). This allows the attacker to read any local JSON file on the server, regardless of its location [2][4].

Impact

Successful exploitation enables the attacker to read sensitive information stored in JSON files, such as configuration parameters, authentication tokens, or application data. This information leakage could be leveraged for further attacks against the system or its users [4].

Mitigation

The vulnerability affects AgentScope 0.0.4. Users are advised to update to a patched version or manually implement input validation to restrict file paths to the intended examples directory. The project maintainers have been notified, and a fix is available in later releases [1].