Lucene search
HistoryJul 04, 2024 - 12:15 p.m.
CVE-2024-6507
command injection
kaggle
input sanitization
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.1%
Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() API
Related
cvelist
cvelist
CVE-2024-6507 Deep Lake Kaggle command injection
2024-07-04 11:58:21
vulnrichment
vulnrichment
CVE-2024-6507 Deep Lake Kaggle command injection
2024-07-04 11:58:21
cve
cve
CVE-2024-6507
2024-07-04 12:15:03
veracode
veracode
Command Injection
2024-07-05 06:27:10
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.1%
Related for NVD:CVE-2024-6507