Beveiligingsadvies

CVE-2024-24591

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-06 14:40:56

Laatst bijgewerkt 2025-05-15 19:44:27

Toegewezen door HiddenLayer

CVSS-score 8.0

Status PUBLISHED

Beschrijving

A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a maliciously uploaded dataset to write local or remote files to an arbitrary location on an end user’s system when interacted with.

← Alle CVE's bekijken Bekijk op cve.org ↗