Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/06 12:00 a.m.•3 views

CVE-2024-4889: Improper Control of Generation of Code

A code injection vulnerability exists in the berriai/litellm application, version 1.34.6, due to the use of unvalidated input in the eval function within the secret management system. This vulnerability requires a valid Google KMS configuration file to be exploitable. Specifically, by setting the...

7.2CVSS7.8AI score0.00859EPSS
SaveExploits1References1
Rows per page
Query Builder