CVE-2024-37057 in MLflow정보

요약

\~에 의해 MITRE • 2024. 06. 04.

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

HiddenLayer

예약하다

2024. 05. 31.

공개

2024. 06. 04.

모더레이션

수락

항목

VDB-267034

CPE

준비됨

CWE

CWE-502 (확인됨)

CVSS

8.8 (CNA)

EPSS

0.00618

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-37057
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-37057
CVE Details	https://www.cvedetails.com/cve/CVE-2024-37057/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!