Security Advisory

CVE-2024-45856

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-12 13:05:01

Last updated 2024-09-12 16:57:45

Assigner HiddenLayer

State PUBLISHED

Description

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.

← Browse all CVEs View on cve.org ↗