Lucene search
+L

CVE-2024-5452 RCE via Property/Class Pollution in lightning-ai/pytorch-lightning

🗓️ 06 Jun 2024 17:54:57Reported by @huntr_aiType 
cvelist
 cvelist
🔗 www.cve.org👁 82 Views

RCE vulnerability in pytorch-lightning library version 2.2.1 due to mishandling of dunder attributes by deepdiff library, leading to arbitrary attribute write and total RCE on self-hosted applications

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Improper Control of Dynamically-Managed Code Resources in Lightningai Pytorch_Lightning
22 Nov 202406:56
–githubexploit
githubexploit
GithubExploit
Exploit for Improper Control of Dynamically-Managed Code Resources in Lightningai Pytorch_Lightning
9 Feb 202500:14
–githubexploit
circl
Circl
CVE-2024-5452
11 Jun 202413:54
–circl
cnnvd
CNNVD
Pytorch-Lightning Security Vulnerability
6 Jun 202400:00
–cnnvd
cve
CVE
CVE-2024-5452
6 Jun 202417:54
–cve
github
Github Security Blog
Remote code execution in pytorch lightning
6 Jun 202418:30
–github
kitploit
Kitploit
CVE-2024-5452
12 Oct 202616:39
–kitploit
mend
Mend
CVE-2024-5452
6 Jun 202417:54
–mend
nvd
NVD
CVE-2024-5452
6 Jun 202418:15
–nvd
osv_ghsa
osv_ghsa
GHSA-CGWC-QVRX-RF7F Remote code execution in pytorch lightning
6 Jun 202418:30
–osv_ghsa
Rows per page
[
  {
    "vendor": "lightning-ai",
    "product": "lightning-ai/pytorch-lightning",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.3.3",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation