Allegro Authorization Issues Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from a lack of authentication, which allows remote attackers to arbitrarily access, create, modify, and delete files...

PT-2024-20476 · Allegro Ai · Clearml

Name of the Vulnerable Software and Affected Versions: Allegro AI's ClearML platform affected versions not specified Description: A cross-site scripting XSS vulnerability in the web server component of Allegro AI's ClearML platform allows a remote attacker to execute a JavaScript payload when a...

Allegro Cross-Site Request Forgery Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A cross-site request forgery vulnerability exists in Allegro AI ClearML. A remote attacker can use this vulnerability to impersonate a user by sending API requests via maliciously...

CVE-2024-24595

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

Design/Logic Flaw

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

CVE-2024-24595

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

CVE-2024-24595

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...

CVE-2024-24595

CVE-2024-24595 affects Allegro AI ClearML (open-source) with a plaintext password storage flaw in the MongoDB instance, causing potential leakage of user emails and passwords. Root cause: credentials stored unencrypted in MongoDB. Impact: server compromise possible; confidentiality and integrity ...

PT-2024-20477

Name of the Vulnerable Software and Affected Versions ClearML affected versions not specified Description The issue concerns the storage of passwords in plaintext within the MongoDB instance of Allegro AI's open-source version of ClearML. This results in a compromised server potentially leaking a...

Allegro AI ClearML Security Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from storing passwords in plaintext in a MongoDB instance, causing an infected server to disclose all user emails and...

CVE-2023-6778 Cross-site Scripting (XSS) - Stored in allegroai/clearml-server

Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...

CVE-2023-6778 Cross-site Scripting (XSS) - Stored in allegroai/clearml-server

Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...

CVE-2023-6778

CVE-2023-6778 affects ClearML Server (allegroai/clearml-server). It is a stored XSS vulnerability in versions prior to 1.13.0, enabling attackers to inject scripts via the affected web interface. The root cause is untrusted user input stored and rendered, leading to potential data exposure or ses...

PT-2023-32775 · Allegro Ai · Allegroai/Clearml-Server

Name of the Vulnerable Software and Affected Versions: allegroai/clearml-server versions prior to 1.13.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the ClearML Open Source Server. This server is not designed for public use and should be placed behind a...

ClearML Server Cross-Site Scripting Vulnerability

ClearML Server is an open source suite of tools from ClearML that simplifies machine learning workflows. A cross-site scripting vulnerability exists in versions of ClearML Server prior to 1.13.0 that stems from vulnerability to stored cross-site scripting XSS attacks...