Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: mindsdb 24.7.4.1 Clear all filters
TI-2024-30807 CVE-2024-45851 · GHSA-wf9g-c67g-h4ch

Code injection in mindsdb

Priority MEDIUM 42

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00864 Published 2024-09-12 Fixed in 24.7.4.1 CWE-95
TI-2024-30806 CVE-2024-45850 · GHSA-v6g6-3cm3-vf6c

Code injection in mindsdb

Priority MEDIUM 42

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00864 Published 2024-09-12 Fixed in 24.7.4.1 CWE-95
TI-2024-30805 CVE-2024-45849 · GHSA-c85f-pcx6-2ghm

Code injection in mindsdb

Priority HIGH 73

An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00864 Published 2024-09-12 Fixed in 24.7.4.1 CWE-95
TI-2024-30804 CVE-2024-45848 · GHSA-9gq6-6936-885w

Code injection in mindsdb

Priority HIGH 73

An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00844 Published 2024-09-12 Fixed in 24.7.4.1 CWE-95
TI-2024-30803 CVE-2024-45847 · GHSA-crmg-rp64-5cm3

Code injection in mindsdb

Priority HIGH 73

An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00851 Published 2024-09-12 Fixed in 24.7.4.1 CWE-95
TI-2024-30802 CVE-2024-45846 · GHSA-wcjw-3v6p-4v3r

Code injection in mindsdb

Priority HIGH 73

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02131 Published 2024-09-12 Fixed in 24.7.4.1 CWE-95