4 matches found
CVE-2024-49375
Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: 1. The HTTP API must be enabled on t...
CVE-2024-49375
Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: 1. The HTTP API must be enabled on t...
CVE-2024-49375
creationtimestamp| type| source ---|---|--- 2025-01-14 19:09:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1569 2025-01-14 19:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxmcfnuz2n 2025-01-14 19:48:45+00:00| seen|...
CVE-2024-49375 Remote Code Execution via Remote Model Loading in Rasa
Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are: 1. The HTTP API must be enabled on t...