PT-2023-36076 · Mindsdb · Mindsdb

Publicado 2023-12-11 · Atualizado 2023-12-11

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MindsDB versions prior to 23.11.4.1

Description The issue concerns a limited file write vulnerability in the file.py module. This vulnerability allows for certain unauthorized file system modifications.

Recommendations For versions prior to 23.11.4.1, update to version 23.11.4.1 or use MindsDB's staging branch, which contains a fix for the issue.

Correção

Identificadores relacionados

PYSEC-2023-278

Produtos afetados

Mindsdb

Referências · 3

• https://github.com/mindsdb/mindsdb/security/advisories/GHSA-crhp-7c74-cg4c · Nota
• https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe · Nota
• https://osv.dev/vulnerability/PYSEC-2023-278 · Aviso do Fabricante