193 matches found
CVE-2024-24595
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...
CVE-2024-24595
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...
CVE-2024-24595
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...
CVE-2024-24595: Insufficiently Protected Credentials
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords...
Allegro AI ClearML Security Vulnerability
Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from storing passwords in plaintext in a MongoDB instance, causing an infected server to disclose all user emails and...
PT-2024-20477
Name of the Vulnerable Software and Affected Versions ClearML affected versions not specified Description The issue concerns the storage of passwords in plaintext within the MongoDB instance of Allegro AI's open-source version of ClearML. This results in a compromised server potentially leaking a...
CVE-2023-6778
CVE-2023-6778 affects ClearML Server (allegroai/clearml-server). It is a stored XSS vulnerability in versions prior to 1.13.0, enabling attackers to inject scripts via the affected web interface. The root cause is untrusted user input stored and rendered, leading to potential data exposure or ses...
CVE-2023-6778 Cross-site Scripting (XSS) - Stored in allegroai/clearml-server
Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...
CVE-2023-6778 Cross-site Scripting (XSS) - Stored in allegroai/clearml-server
Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...
CVE-2023-6778
Cross-site Scripting XSS - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0...
PT-2023-32775 · Allegro Ai · Allegroai/Clearml-Server
Name of the Vulnerable Software and Affected Versions: allegroai/clearml-server versions prior to 1.13.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the ClearML Open Source Server. This server is not designed for public use and should be placed behind a...
ClearML Server Cross-Site Scripting Vulnerability
ClearML Server is an open source suite of tools from ClearML that simplifies machine learning workflows. A cross-site scripting vulnerability exists in versions of ClearML Server prior to 1.13.0 that stems from vulnerability to stored cross-site scripting XSS attacks...