Back to feed
EUVD-2024-0620 · Published Feb 6, 2024
Allegro AI ClearML vulnerable to deserialization of untrusted data Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
Technologies
Clear ClearmlClearml Clearml
Weaknesses
CWE-502
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
