Super Agent Party
Monthly
Unauthenticated remote information disclosure in heshengtao super-agent-party (up to version 0.4.1) allows remote attackers to read sensitive file content by manipulating the tool_name or tool_params arguments passed to the get_file_content function via the execute_tool_manually endpoint in server.py. The flaw requires no authentication and no user interaction, and a public proof-of-concept exploit is available on GitHub. No patch has been issued; the vendor did not respond to coordinated disclosure.
Server-side request forgery in heshengtao's super-agent-party (versions 0.4.0-0.4.1) enables remote unauthenticated attackers to coerce the application into issuing arbitrary HTTP requests to internal or otherwise restricted network destinations. The flaw exists in the sanitize_proxy_url function within server.py on the extension_proxy route, where the url argument is insufficiently validated before being acted upon. A public proof-of-concept exploit is available via GitHub Gist, lowering the barrier to exploitation; the vendor did not respond to responsible disclosure, and no patch has been released.
Unauthenticated remote information disclosure in heshengtao super-agent-party (up to version 0.4.1) allows remote attackers to read sensitive file content by manipulating the tool_name or tool_params arguments passed to the get_file_content function via the execute_tool_manually endpoint in server.py. The flaw requires no authentication and no user interaction, and a public proof-of-concept exploit is available on GitHub. No patch has been issued; the vendor did not respond to coordinated disclosure.
Server-side request forgery in heshengtao's super-agent-party (versions 0.4.0-0.4.1) enables remote unauthenticated attackers to coerce the application into issuing arbitrary HTTP requests to internal or otherwise restricted network destinations. The flaw exists in the sanitize_proxy_url function within server.py on the extension_proxy route, where the url argument is insufficiently validated before being acted upon. A public proof-of-concept exploit is available via GitHub Gist, lowering the barrier to exploitation; the vendor did not respond to responsible disclosure, and no patch has been released.