Composio Server-Side Request Forgery Vulnerability in Webtool Scrape Website Content Endpoint

A Server-Side Request Forgery (SSRF) vulnerability has been identified in Composio version 0.4.2. The issue arises in the '/api/actions/execute/WEBTOOL_SCRAPE_WEBSITE_CONTENT' endpoint, where it allows attackers to read files, access AWS metadata, and interact with local services on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized file access, exposure of sensitive AWS metadata, and interaction with local services, potentially causing further harm to the system.