CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

bento2seldon (>=0.1.0, <=0.4.0), bento2seldon4recsys (>=0.1.0, <=0.1.3) +14 more potentially affected by CVE-2024-2912 via bentoml (>=0.9.2, <=1.1.11)

bentoml PYPI version =0.9.2, =0.1.0, =0.1.0, =0.0.10, =0.0.1, =0.0.1, =1.0.3, =0.0.10, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2024-2912 Source advisory: MEND:CVE-2024-2912...

CVE-2024-2912: Initialization of a Resource with an Insecure Default

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

PT-2024-22740

Name of the Vulnerable Software and Affected Versions BentoML affected versions not specified Description An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability,...

BentoML security vulnerabilities

BentoML is an open source modeling service library from BentoML Open Source. for building high-performance and scalable AI applications using Python. A security vulnerability exists in BentoML that stems from the presence of an insecure deserialization vulnerability that allows Remote Code...