Read the docs

Refuel

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Refuel records in CISA KEV

No Refuel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Autolabel 2 records HIGH

Records

2 records

TI-2024-18159 CVE-2024-27321 · GHSA-4fgp-7vvm-m4jf

CSV injection in Refuel autolabel

Priority HIGH 69

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00349 Published 2024-09-12 No fix listed CWE-95
TI-2024-18158 CVE-2024-27320 · GHSA-g2m8-f3x2-qprw

CSV injection in Refuel autolabel

Priority HIGH 69

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00352 Published 2024-09-12 No fix listed CWE-95
Open these records in search →