greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/bayuncao/vul-cve-17 |
History
Thu, 29 Aug 2024 21:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-434 | |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-03-14T00:00:00
Updated: 2024-08-29T17:31:14.300Z
Reserved: 2024-03-08T00:00:00
Link: CVE-2024-28425
Vulnrichment
Updated: 2024-08-02T00:56:57.265Z
NVD
Status : Awaiting Analysis
Published: 2024-03-14T19:15:50.980
Modified: 2024-08-29T20:36:36.380
Link: CVE-2024-28425
Redhat
No data.