Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local File Inclusion in stitionai/devika
Vulnerability Description
The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application with a malicious snapshot_path parameter.
CVSS Information
N/A
Vulnerability Type
相对路径遍历
Vulnerability Title
Devika 安全漏洞
Vulnerability Description
Devika是Stition AI的一位高级 AI 软件工程师，可以理解高级人类指令，将它们分解为步骤，研究相关信息，并编写代码以实现给定的目标。 Devika存在安全漏洞，该漏洞源于存在相对路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A