CVE-2024-8955

MEDIUM6.8EPSS 0.14%

composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL

Published: 3/20/2025Modified: 10/16/2025
Also known as:GHSA-38mg-wm59-g64x

Description

A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOL_GOTO_PAGE and BROWSERTOOL_GET_PAGE_DETAILS actions.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.8CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References (4)