| शीर्षक | docarray 0.40.1 Improperly Controlled Modification of Object Prototype Attribute |
|---|
| विवरण | Docarray MultiModalDataset insecurely implemented the component on preprocessing functions. In its __getitem__ method, the dotted object path passed in is not performed any sanitization to prevent against internal class object access and operation. When multimodal dataset operation is deployed through web API, such as offcially recommended FastAPI, bad actors are able to access, e.g. via double under attributes .__class__.__base__... and overwrite the internal python runtime class objects, which at least leads to DoS attack. However, when combined with other backend code enriching the python runtime states, other attacks such as RCE and XSS are still promising as our previous finding proves. (see related materials) |
|---|
| स्रोत | ⚠️ https://gist.github.com/superboy-zjc/56502343bcb12eb653081b426debf2c8 |
|---|
| उपयोगकर्ता | Gavin Zhong (UID 84092) |
|---|
| सबमिशन | 09/05/2025 07:19 PM (1 वर्ष पहले) |
|---|
| संयम | 24/05/2025 07:36 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 310238 [docarray तक 0.40.1 Web API torch_dataset.py __getitem__ अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|