Skip to content
OpenAdvisories

Product · 3clyp50

agent-zero

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Agent Zero < 1.15 Path Traversal File Read via image_get API

    Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, which relies solely on an extension allowlist while the path co…