vertaai

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

vertaai records in CISA KEV

No vertaai vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2024-01827 CVE-2024-1961 · GHSA-j9q5-gh3m-3cf9

MEDIUM 48

vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01034 Published 2024-04-16 No fix listed CWE-22

TI-2023-05549 CVE-2023-6023 · GHSA-qr8v-2mxv-xrj9

LOW 38

An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02975 Published 2023-11-16 No fix listed CWE-29