Lucene search
HistorySep 10, 2024 - 4:15 p.m.
CVE-2024-45595
d-tale
remote code execution
upgrade
version 3.14.1
custom filter
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
30.7%
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the “Custom Filter” input is turned off by default.
Affected configurations
Node
mand-taleRange<3.14.1
Related
cve
cve
CVE-2024-45595
2024-09-10 16:15:21
osv
osv
CVE-2024-45595
2024-09-10 16:15:21
cvelist
cvelist
vulnrichment
vulnrichment
github
github
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
30.7%
Related for NVD:CVE-2024-45595