CVE-2024-37057 in MLflowinformación

Resumen

por MITRE • 2024-06-04

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

HiddenLayer

Reservar

2024-05-31

Divulgación

2024-06-04

Moderación

aceptado

Artículo

VDB-267034

CPE

listo

EPSS

0.00618

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2024-37057
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-37057
CVE Detailshttps://www.cvedetails.com/cve/CVE-2024-37057/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!