CVE-2024-6483

🗓️ 20 Mar 2025 10:09:36Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Vulnerability in aimhubio/aim version 3.19.3 allows arbitrary file deletion via path traversal.

Reporter	Title	Published	Views	Family All 11
CNNVD	Aim 安全漏洞	20 Mar 202500:00	–	cnnvd
Cvelist	CVE-2024-6483 Arbitrary File/Directory Deletion in aimhubio/aim	20 Mar 202510:09	–	cvelist
EUVD	EUVD-2025-6986	3 Oct 202520:07	–	euvd
Github Security Blog	Aim Relative Path Traversal vulnerability	20 Mar 202512:32	–	github
NVD	CVE-2024-6483	20 Mar 202510:15	–	nvd
OSV	GHSA-P6X3-V6G3-7557 Aim Relative Path Traversal vulnerability	20 Mar 202512:32	–	osv
RedhatCVE	CVE-2024-6483	22 Mar 202512:56	–	redhatcve
Snyk	Relative Path Traversal	20 Mar 202512:32	–	snyk
vulnersOsv	ado-sfttrainer (>=1.0.1 <=1.8.0), aim-mlflow (>=0.1.0 <=0.2.1) +27 more potentially affected by CVE-2024-6483 via aim (>=3.17.4 <=4.0.3)	20 Mar 202512:32	–	vulnersosv
vulnersOsv	llm-toys (=0.1.1), tcbench (>=0.0.20 <=0.0.22) +1 more potentially affected by CVE-2024-6483 via aim (>=3.17.4 <=3.19.3)	20 Mar 202512:32	–	vulnersosv

NVD

Node

aimstack aimMatch3.19.3python

[
  {
    "vendor": "aimhubio",
    "product": "aimhubio/aim",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/dc45d480-e579-4af4-8603-c52ecfd5e363

Parameter	Position	Path	Description	CWE
run-names	request body	runs/delete-batch	Path traversal vulnerability in runs/delete-batch allowing deletion of arbitrary files/directories via user-supplied run-names.	CWE-23

23 Jul 2025 20:57Current

5.5Medium risk

Vulners AI Score5.5

CVSS 35.3

EPSS0.00659

SSVC

CWE-23