SSRF Vulnerability in wandb Repository Could Lead to Remote Code Execution
CVE-2024-4642

7.7HIGH

Key Information:

Vendor

Wandb

Status
Wandb/wandb
Vendor
CVE Published:
16 May 2024

What is CVE-2024-4642?

The XYZ application by ABC Company has been identified with a vulnerability that may lead to potential denial of service conditions within its operational environment. While details regarding exploitation are limited, it is crucial for users and administrators to remain vigilant and ensure that their deployments are monitored for any unusual activities. Regular patches and adherence to security best practices are essential to mitigate risks associated with the application.

Affected Version(s)

wandb/wandb <= unspecified

References

https://huntr.com/bounties/055eb540-57f8-46d6-b858-3a9e22...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.