Allegro Cross-Site Request Forgery Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A cross-site request forgery vulnerability exists in Allegro AI ClearML. A remote attacker can use this vulnerability to impersonate a user by sending API requests via maliciously...

Allegro Path Traversal Vulnerability

Allegro is an open source cross-platform library from Allegro that focuses on video game and multimedia programming. A path traversal vulnerability exists in Allegro AI ClearML version 1.4.0 and later. An attacker can exploit this vulnerability to write a local or remote file to an arbitrary...

Allegro Authorization Issues Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from a lack of authentication, which allows remote attackers to arbitrarily access, create, modify, and delete files...

CVE-2024-24595

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

Design/Logic Flaw

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

CVE-2024-24595

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

CVE-2024-24595

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

CVE-2024-24595

CVE-2024-24595 affects Allegro AI ClearML (open-source) with a plaintext password storage flaw in the MongoDB instance, causing potential leakage of user emails and passwords. Root cause: credentials stored unencrypted in MongoDB. Impact: server compromise possible; confidentiality and integrity ...

Allegro AI ClearML Security Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from storing passwords in plaintext in a MongoDB instance, causing an infected server to disclose all user emails and...

PT-2024-20477

Name of the Vulnerable Software and Affected Versions ClearML affected versions not specified Description The issue concerns the storage of passwords in plaintext within the MongoDB instance of Allegro AI's open-source version of ClearML. This results in a compromised server potentially leaking a...

CVE-2023-6778 Cross-site Scripting (XSS) - Stored in allegroai/clearml-server

Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...

CVE-2023-6778

CVE-2023-6778 affects ClearML Server (allegroai/clearml-server). It is a stored XSS vulnerability in versions prior to 1.13.0, enabling attackers to inject scripts via the affected web interface. The root cause is untrusted user input stored and rendered, leading to potential data exposure or ses...

CVE-2023-6778 Cross-site Scripting (XSS) - Stored in allegroai/clearml-server

Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...

ClearML Server Cross-Site Scripting Vulnerability

ClearML Server is an open source suite of tools from ClearML that simplifies machine learning workflows. A cross-site scripting vulnerability exists in versions of ClearML Server prior to 1.13.0 that stems from vulnerability to stored cross-site scripting XSS attacks...

PT-2023-32775 · Allegro Ai · Allegroai/Clearml-Server

Name of the Vulnerable Software and Affected Versions: allegroai/clearml-server versions prior to 1.13.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the ClearML Open Source Server. This server is not designed for public use and should be placed behind a...