Advisories · Technology
coze-dev coze-studio.
Every CVE that names coze-dev coze-studio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
- coze-dev coze-studio
- Broken access control
- CVSS 8.7 High
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
- coze-dev coze-studio
- CWE-1188
- CVSS 7.1 High
Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin
- coze-dev coze-studio
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node
- coze-dev coze-studio
- Broken access control