deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8060
Published: 2025-03-20
Description: OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint `/audio/api/v1/transcriptions` that allows for arbitrary file upload. The application performs insufficient validation on the `file.content_type` and allows user-controlled filenames, leading to a path traversal vulnerability. This can be exploited by an authenticated user to overwrite critical files within the Docker container, potentially leading to remote code execution as the root user.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/a3b1a4b7-c723-496d-842c-844cc0988fe9
CVE: CVE-2024-8061
Published: 2025-03-20
Description: In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does not respond to other requests while waiting. The issue arises in the client used by the `aim` tracking server to communicate with external resources, specifically in the `_run_read_instructions` method and similar calls without timeouts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1088
References: https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b
CVE: CVE-2024-8062
Published: 2025-03-20
Description: A vulnerability in the typeahead endpoint of h2oai/h2o-3 version 3.46.0 allows for a denial of service. The endpoint performs a `HEAD` request to verify the existence of a specified resource without setting a timeout. An attacker can exploit this by sending multiple requests to an attacker-controlled server that hangs, causing the application to block and become unresponsive to other requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1088
References: https://huntr.com/bounties/a04190d9-4acb-449a-9a7f-f1bf6be1ed23; https://huntr.com/bounties/a04190d9-4acb-449a-9a7f-f1bf6be1ed23
CVE: CVE-2024-8063
Published: 2025-03-20
Description: A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9
CVE: CVE-2024-8065
Published: 2025-03-20
Description: A Cross-Site Request Forgery (CSRF) vulnerability in version v1.4.1 of danswer-ai/danswer allows attackers to perform unauthorized actions in the context of the victim's browser. This includes connecting the victim's application with a malicious Slack Bot, inviting users, and deleting chats, among other actions. The application does not implement any CSRF protection, making it susceptible to these attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://huntr.com/bounties/61b58753-af36-43fd-b1b9-f3019532dd08
CVE: CVE-2024-8099
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of vanna-ai/vanna when using DuckDB as the database. An attacker can exploit this vulnerability by submitting crafted SQL queries that leverage DuckDB's default features, such as `read_csv`, `read_csv_auto`, `read_text`, and `read_blob`, to make unauthorized requests to internal or external resources. This can lead to unauthorized access to sensitive data, internal systems, and potentially further attacks.
CVSS Score: 8.3 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/19b96694-ed52-4ee4-8d2c-6cc7bd09c0ad
CVE: CVE-2024-8101
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in the Text Explorer component of aimhubio/aim version 3.23.0. The vulnerability arises due to the use of `dangerouslySetInnerHTML` without proper sanitization, allowing arbitrary JavaScript execution when rendering tracked texts. This can be exploited by injecting malicious HTML content during the training process, which is then rendered unsanitized in the Text Explorer.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/60cf2b93-a9a2-435e-a222-3d6abde26adb; https://huntr.com/bounties/60cf2b93-a9a2-435e-a222-3d6abde26adb
CVE: CVE-2024-8156
Published: 2025-03-20
Description: A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. The untrusted user input `github.head.ref` is used insecurely, allowing an attacker to inject arbitrary commands. This vulnerability affects versions up to and including the latest version. An attacker can exploit this by creating a branch name with a malicious payload and opening a pull request, potentially leading to reverse shell access or theft of sensitive tokens and keys.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/significant-gravitas/autogpt/commit/1df7d527dd37dff8363dc162fb58d300f072e302; https://huntr.com/bounties/959efe87-f109-4cef-94d8-90ff2c7aef51; https://huntr.com/bounties/959efe87-f109-4cef-94d8-90ff2c7aef51
CVE: CVE-2024-8183
Published: 2025-03-20
Description: A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
CVSS Score: 7.6 (HIGH)
CWE: CWE-346
References: https://github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2; https://huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2
CVE: CVE-2024-8196
Published: 2025-03-20
Description: In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vulnerability allows an attacker to gain full backend access, enabling them to perform actions such as deleting all data from the workspace.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/mintplex-labs/anything-llm/commit/9bfe477f10b188bfe3508ac29105df80d4522ece; https://huntr.com/bounties/dbde1c71-7aa5-46f6-847a-d89793cf97a9
CVE: CVE-2024-8238
Published: 2025-03-20
Description: In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safer_getattr() function from RestrictedPython. This version does not protect against the str.format_map() method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution. The vulnerability arises because str.format_map() can read arbitrary attributes of Python objects, enabling attackers to access sensitive variables such as os.environ. If an attacker can write files to a known location on the Aim server, they can use str.format_map() to load a malicious .dll/.so file into the Python interpreter, leading to unrestricted code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1336
References: https://huntr.com/bounties/4e140ef9-f6d1-4e68-a44c-3b9e856924d3
CVE: CVE-2024-8248
Published: 2025-03-20
Description: A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.
CVSS Score: 7.2 (HIGH)
CWE: CWE-29
References: https://github.com/mintplex-labs/anything-llm/commit/47a5c7126c20e2277ee56e2c7ee11990886a40a7; https://huntr.com/bounties/7d6c3b7a-1116-450d-b539-9c911a97537e
CVE: CVE-2024-8249
Published: 2025-03-20
Description: mintplex-labs/anything-llm version git 6dc3642 contains an unauthenticated Denial of Service (DoS) vulnerability in the API for the embeddable chat functionality. An attacker can exploit this vulnerability by sending a malformed JSON payload to the API endpoint, causing a server crash due to an uncaught exception. This issue is fixed in version 1.2.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/mintplex-labs/anything-llm/commit/548da9ade30368289c5beaf0a8ee2ed2b5c1d81c; https://huntr.com/bounties/2fb0c93f-5bc1-4212-bdca-292db7c6951f
CVE: CVE-2024-8251
Published: 2025-03-20
Description: A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-chat" where user-provided JSON is directly taken to the Prisma library's where clause. An attacker can exploit this by providing a specially crafted JSON object, such as {"sessionId":{"not":"a"}}, causing Prisma to return all data from the table. This can lead to unauthorized access to all user queries in embedded chat mode.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/mintplex-labs/anything-llm/commit/334fd9cdd02ad4aa6a3c9bdfc95e7764651c13f4; https://huntr.com/bounties/7c263ef1-7d50-475a-9425-b15df4e0403c
CVE: CVE-2024-8400
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability allows an attacker to upload a malicious HTML file containing JavaScript code, which is then executed when the file is accessed. This can lead to the execution of arbitrary JavaScript in the context of the user's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/2cca68e34f029babbe4eaa5a77d220dad68fdd49; https://huntr.com/bounties/405f16b8-848e-427d-a61a-ea7d3fd6f0e3; https://huntr.com/bounties/405f16b8-848e-427d-a61a-ea7d3fd6f0e3
CVE: CVE-2024-8438
Published: 2025-03-20
Description: A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint `/api/file` does not properly sanitize the `path` parameter, allowing an attacker to read arbitrary files on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/3f170c58-42ee-422d-ab6f-32c7aa05b974
CVE: CVE-2024-8487
Published: 2025-03-20
Description: A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-346
References: https://huntr.com/bounties/7aca7507-a94e-4e63-83a2-15648e5c4067; https://huntr.com/bounties/7aca7507-a94e-4e63-83a2-15648e5c4067
CVE: CVE-2024-8489
Published: 2025-03-20
Description: A vulnerability in modelscope/agentscope, specifically in the AgentScope Studio backend server, allows for Cross-Site Request Forgery (CSRF) due to overly permissive CORS headers. This issue affects the latest commit on the main branch (21161fe). The vulnerability permits an attacker to access all backend endpoints, including the `api/file` endpoint, enabling the reading of arbitrary files on the target's local file system through CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://huntr.com/bounties/93195bf0-9ac2-4476-a2ea-7c9364727e8c
CVE: CVE-2024-8501
Published: 2025-03-20
Description: An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpc_agent's host by exploiting the download_file method. This can lead to unauthorized access to sensitive information, including configuration files, credentials, and potentially system files, which may facilitate further exploitation such as privilege escalation or lateral movement within the network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-36
References: https://huntr.com/bounties/83e433c0-ed2d-4b10-8358-d3c1eee0a47c; https://huntr.com/bounties/83e433c0-ed2d-4b10-8358-d3c1eee0a47c
CVE: CVE-2024-8502
Published: 2025-03-20
Description: A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://huntr.com/bounties/7a42da2a-2ae5-442d-aff9-c9a3b47870eb
CVE: CVE-2024-8524
Published: 2025-03-20
Description: A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/cc4acf33-700d-4220-8a8a-db28f5c4cc8f; https://huntr.com/bounties/cc4acf33-700d-4220-8a8a-db28f5c4cc8f
CVE: CVE-2024-8537
Published: 2025-03-20
Description: A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-29
References: https://huntr.com/bounties/eeb8aa4b-e6e5-465c-b0dd-aa97e3b7dc09
CVE: CVE-2024-8551
Published: 2025-03-20
Description: A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-23
References: https://huntr.com/bounties/e0c0c294-f1e2-4f2c-a632-a9be9fd06989
CVE: CVE-2024-8556
Published: 2025-03-20
Description: A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/8439f16b-5256-4466-bb7d-371572572a4b; https://huntr.com/bounties/8439f16b-5256-4466-bb7d-371572572a4b
CVE: CVE-2024-8581
Published: 2025-03-20
Description: A vulnerability in the `upload_app` function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any file or directory on the system. The function does not implement user input filtering with the `filename` value, causing a Path Traversal error.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/parisneo/lollms-webui/commit/dcc078cbe20d2a9640b0942a622134b0e3fa6e48; https://huntr.com/bounties/67ead5b9-8149-4001-a1cd-ac648cb7b414
CVE: CVE-2024-8613
Published: 2025-03-20
Description: A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705; https://huntr.com/bounties/76258774-b011-4044-9c3d-c2609b1cbd29
CVE: CVE-2024-8616
Published: 2025-03-20
Description: In h2oai/h2o-3 version 3.46.0, the `/99/Models/{name}/json` endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the `exportModelDetails` function in `ModelsHandler.java`, where the user-controllable `mexport.dir` parameter is used to specify the file path for writing model details. This can lead to overwriting files at arbitrary locations on the host system.
CVSS Score: 8.2 (HIGH)
CWE: CWE-73
References: https://huntr.com/bounties/aebf69a5-b9b1-4d2f-a8ff-902c11a8c97a
CVE: CVE-2024-8736
Published: 2025-03-20
Description: A Denial of Service (DoS) vulnerability exists in multiple file upload endpoints of parisneo/lollms-webui version V12 (Strawberry). The vulnerability can be exploited remotely via Cross-Site Request Forgery (CSRF). Despite CSRF protection preventing file uploads, the application still processes multipart boundaries, leading to resource exhaustion. By appending additional characters to the multipart boundary, an attacker can cause the server to parse each byte of the boundary, ultimately leading to service unavailability. This vulnerability is present in the `/upload_avatar`, `/upload_app`, and `/upload_logo` endpoints.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://huntr.com/bounties/935dbc03-1b43-4dbb-b6cd-1aa95a789d4f; https://huntr.com/bounties/935dbc03-1b43-4dbb-b6cd-1aa95a789d4f
CVE: CVE-2024-8763
Published: 2025-03-20
Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary repository, specifically in the compileTextTemplate function. The affected version is git be54057. An attacker can exploit this vulnerability by manipulating the regular expression /{{(.*?)}}/g, causing the server to hang indefinitely and become unresponsive to any requests. This is due to the regular expression's susceptibility to second-degree polynomial time complexity, which can be triggered by a large number of braces in the input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/lunary-ai/lunary/commit/7ff89b0304d191534b924cf063f3648206d497fa; https://huntr.com/bounties/4fb63a6e-0056-4550-a34d-e161de1c13b8
CVE: CVE-2024-8764
Published: 2025-03-20
Description: A vulnerability in lunary-ai/lunary, as of commit be54057, allows users to upload and execute arbitrary regular expressions on the server side. This can lead to a Denial of Service (DoS) condition, as certain regular expressions can cause excessive resource consumption, blocking the server from processing other requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/lunary-ai/lunary/commit/7ff89b0304d191534b924cf063f3648206d497fa; https://huntr.com/bounties/088c04a1-d23a-47f2-9d7c-b84d7332868d
CVE: CVE-2024-8765
Published: 2025-03-20
Description: In lunary-ai/lunary, the privilege check mechanism is flawed in version git afc5df4. The system incorrectly identifies certain endpoints as public if the path contains '/auth/' anywhere within it. This allows unauthenticated attackers to access sensitive endpoints by including '/auth/' in the path. As a result, attackers can obtain and modify sensitive data and utilize other organizations' resources without proper authentication.
CVSS Score: 7.3 (HIGH)
CWE: CWE-41
References: https://github.com/lunary-ai/lunary/commit/7ff89b0304d191534b924cf063f3648206d497fa; https://huntr.com/bounties/4908cfcf-607a-412a-9635-966cbb08bb49
CVE: CVE-2024-8769
Published: 2025-03-20
Description: A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion through relative path traversal. The `run_hash` parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. This vulnerability is exposed through the `Repo._close_run()` method, which is accessible via the tracking server instruction API. As a result, an attacker can exploit this to delete any arbitrary file on the machine running the tracking server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://huntr.com/bounties/59d3472f-f581-4beb-a090-afd36a00ecf7; https://huntr.com/bounties/59d3472f-f581-4beb-a090-afd36a00ecf7
CVE: CVE-2024-8789
Published: 2025-03-20
Description: Lunary-ai/lunary version git 105a3f6 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. The application allows users to upload their own regular expressions, which are then executed on the server side. Certain regular expressions can have exponential runtime complexity relative to the input size, leading to potential denial of service. An attacker can exploit this by submitting a specially crafted regular expression, causing the server to become unresponsive for an arbitrary length of time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/lunary-ai/lunary/commit/7ff89b0304d191534b924cf063f3648206d497fa; https://huntr.com/bounties/e32f5f0d-bd46-4268-b6b1-619e07c6fda3
CVE: CVE-2024-8859
Published: 2025-03-20
Description: A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled. The vulnerability is triggered if the user has configured the dbfs service, and during usage, the service is mounted to a local directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29
References: https://github.com/mlflow/mlflow/commit/7791b8cdd595f21b5f179c7b17e4b5eb5cbbe654; https://huntr.com/bounties/2259b88b-a0c6-4c7c-b434-6aacf6056dcb
CVE: CVE-2024-8898
Published: 2025-03-20
Description: A path traversal vulnerability exists in the `install` and `uninstall` API endpoints of parisneo/lollms-webui version V12 (Strawberry). This vulnerability allows attackers to create or delete directories with arbitrary paths on the system. The issue arises due to insufficient sanitization of user-supplied input, which can be exploited to traverse directories outside the intended path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/parisneo/lollms-webui/commit/6d07c8a0dd0a15cc060becc73fda9fe8e788eb23; https://huntr.com/bounties/6072371f-0ddc-42e3-9207-1c6d6b18d32f; https://huntr.com/bounties/6072371f-0ddc-42e3-9207-1c6d6b18d32f
CVE: CVE-2024-8952
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and interact with local services on the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/d1acdd38-10d7-45df-9df0-9fc71f0e1c2a; https://huntr.com/bounties/d1acdd38-10d7-45df-9df0-9fc71f0e1c2a
CVE: CVE-2024-8953
Published: 2025-03-20
Description: In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-627, CWE-913
References: https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c; https://huntr.com/bounties/8203d721-e05f-4500-a5bc-c0bec980420c
CVE: CVE-2024-8954
Published: 2025-03-20
Description: In composiohq/composio version 0.5.10, the API does not validate the `x-api-key` header's value during the authentication step. This vulnerability allows an attacker to bypass authentication by providing any random value in the `x-api-key` header, thereby gaining unauthorized access to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-304
References: https://huntr.com/bounties/f1e0fdce-00d7-4261-a[PII_REDACTED]00b12
CVE: CVE-2024-8955
Published: 2025-03-20
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/13bc0399-2d9b-449e-95f2-6e9a7e39383d