CVE-2024-24592

Publication date

2024-02-06 14:41:24

Family

HiddenLayer

State

PUBLISHED

Description

Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily access, create, modify and delete files.