Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: polyaxon Clear all filters
TI-2024-08689 CVE-2024-9365 · GHSA-wmc2-c6g2-9mf2

Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon

Priority MEDIUM 62

A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00249 Published 2025-03-20 No fix listed CWE-352
TI-2024-08686 CVE-2024-9362 · GHSA-q88j-ff64-2m3q

Directory Traversal in polyaxon/polyaxon

Priority HIGH 72

An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04396 Published 2025-03-20 No fix listed CWE-22
TI-2024-08687 CVE-2024-9363 · GHSA-m47g-ghr5-3734

Unauthorized File Deletion in polyaxon/polyaxon

Priority HIGH 72

An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01065 Published 2025-03-20 No fix listed CWE-23