Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Allegro.AI ClearML 1.14.2 Clear all filters
TI-2024-16209 CVE-2024-24593 · GHSA-w6j5-fp4m-crpf

Cross-site request forgery in Allegro.AI ClearML

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro AI’s ClearML platform allows a remote attacker to impersonate a user by sending API requests via malic…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0038 Published 2024-02-06 Fixed in 1.14.2 CWE-352
TI-2024-16207 CVE-2024-24591 · GHSA-m95h-p4gg-wfw3

Path traversal in Allegro.AI ClearML

Priority HIGH 73

A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a maliciously uploaded dataset to write local or remote files to an arbitrary location on an end user’…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00798 Published 2024-02-06 Fixed in 1.14.2 CWE-22