Threats tagged 'ghsa-fvhg-m33v-6wqx'

A vulnerability in heshengtao super-agent-party up to version 0.4.1 affects the get_file_content function in the execute_tool_manually endpoint. Manipulating the tool_name or tool_params arguments can lead to information disclosure. The vulnerability can be exploited remotely. Public exploit code exists, but the vendor has not responded or provided a fix.