Security Advisory

CVE-2024-8556

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-20 10:11:21

Last updated 2025-03-20 13:05:54

Assigner @huntr_ai

CVSS score 6.1

State PUBLISHED

Description

A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.

← Browse all CVEs View on cve.org ↗