What is CVE-2024-10457?

CVE-2024-10457 is a medium-severity vulnerability in Significant-Gravitas Significant-Gravitas/autogpt, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2025-03-20.

How severe is CVE-2024-10457?

Medium severity. CVSS v3 base score is 6.5 out of 10.

SSRF in Significant-Gravitas Significant-Gravitas/autogpt

CVE-2024-10457

Multiple Server-Side Request Forgery (SSRF) vulnerabilities were identified in the significant-gravitas/autogpt repository, specifically in the GitHub Integration and Web Search blocks. These vulnerabilities affect version agpt-platform-beta-v0.1.1. The issues arise when block inputs are controlled by untrusted sources, leading to potential credential leakage, internal network scanning, and unauthorized access to internal services, APIs, or data stores. The affected blocks include GithubListPullRequestsBlock, GithubReadPullRequestBlock, GithubAssignPRReviewerBlock, GithubListPRReviewersBlock, GithubUnassignPRReviewerBlock, GithubCommentBlock, GithubMakeIssueBlock, GithubReadIssueBlock, GithubListIssuesBlock, GithubAddLabelBlock, GithubRemoveLabelBlock, GithubListBranchesBlock, and ExtractWebsiteContentBlock.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Significant-gravitas Significant-gravitas/autogpt — versions unspecified

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

Frequently asked questions

What is CVE-2024-10457?: CVE-2024-10457 is a medium-severity vulnerability in Significant-Gravitas Significant-Gravitas/autogpt, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2025-03-20.
How severe is CVE-2024-10457?: Medium severity. CVSS v3 base score is 6.5 out of 10.