Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai

CVE-2024-8489CSRF due to overly permissive CORS headers in modelscope/agentscope

High 8.8

In plain English

A high-severity cross-site request forgery in modelscope/agentscope from modelscope. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.0)8.8High

Exploit odds (30 days)0.2%top 85.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability in modelscope/agentscope, specifically in the AgentScope Studio backend server, allows for Cross-Site Request Forgery (CSRF) due to overly permissive CORS headers. This issue affects the latest commit on the main branch (21161fe). The vulnerability permits an attacker to access all backend endpoints, including the `api/file` endpoint, enabling the reading of arbitrary files on the target's local file system through CSRF.

Affected products (as reported)

Vendor	Product	Versions
modelscope	modelscope/agentscope	unspecified – through latest

Weakness: CWE-352 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://huntr.com/bounties/93195bf0-9ac2-4476-a2ea-7c9364727e8c