Vendors / Mage Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Mage records in CISA KEV No Mage vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00601 · Published 2024-08-22 · No fix listed CWE-200
Priority MEDIUM 62
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00859 · Published 2024-08-23 · No fix listed CWE-35
Priority MEDIUM 62
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00881 · Published 2024-08-23 · No fix listed CWE-22
Priority MEDIUM 43
mage-ai is an open-source data pipeline tool for transforming and integrating data.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00659 · Published 2023-05-09 · Fixed in 0.8.72 CWE-306
Priority MEDIUM 41
Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI termi…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00495 · Published 2024-08-23 · No fix listed CWE-613
Priority LOW 31
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00881 · Published 2024-08-23 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
2 1 4 0 0
THREATIST.IORead the docs