PT-2024-18455 · Unknown · Vertaai/Modeldb

Published 2024-04-15 · Updated 2024-04-16 · CVE-2024-1961

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vertaai/modeldb (affected versions not specified)

Description The issue is related to a path traversal attack due to improper sanitization of user-supplied file paths in the file upload functionality. Attackers can exploit this by manipulating the artifact path parameter to write arbitrary files anywhere in the file system, potentially leading to Remote Code Execution (RCE) by overwriting critical files. This is particularly concerning when the application is run outside of Docker. The vulnerability is present in the NFSController.java and NFSService.java components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-1961

Affected Products

Vertaai/Modeldb

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-1961 · Security Note
• https://twitter.com/VulmonFeeds/status/1780115067410763863 · Twitter Post
• https://huntr.com/bounties/5f602914-3e5d-407a-b8ce-fb444a4e8bb3 · Note
• https://twitter.com/CVEnew/status/1780039193932230684 · Twitter Post