Skip to content
OpenAdvisories

Vendor

louisho5

3 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 5.3

    louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection

    A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function ExecTool.Execute of the file internal/agent/tools/exec.go of the component exec Tool. The manipulation results in os command injection. The attack requires a local appr…

  • Medium 6.3

    louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery

    A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute of the file internal/agent/tools/web.go of the component web Tool. The manipulation of the argument url leads to server-side request forger…

  • Medium 6.3

    louisho5 picobot Workspace filesystem.go GetSkill link following

    A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possibl…