CVE-2024-8487
published 2025-03-20CVE-2024-8487: A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.27%
18.9th percentile
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| modelscope | agentscope | — | — |
| modelscope | agentscope | 0 – 0.0.4 | — |
| modelscope | modelscope_agentscope | unspecified – latest | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.07.4HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
osv·2025-03-20
CVE-2024-8487 [HIGH] AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system.
GHSA
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
ghsa·2025-03-20
CVE-2024-8487 [HIGH] CWE-346 AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-20
Published