CVE-2024-45855 in MindsDBinformation

Résumé

par MITRE • 12/09/2024

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using ‘finetune’ on it.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

HiddenLayer

Réserver

10/09/2024

Divulgation

12/09/2024

Modérer

accepté

Entrée

VDB-277276

CPE

prêt

CWE

CWE-502 (confirmé)

CVSS

7.1 (VulDB)

EPSS

0.00481

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-45855
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-45855
CVE Details	https://www.cvedetails.com/cve/CVE-2024-45855/

◂ Précédent Aperçu Suivant ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!