Exploit for Deserialization of Untrusted Data in Clear Clearml

ClearML Exploit This repository contains a proof-of-concept e...

Exploit for Deserialization of Untrusted Data in Clear Clearml

CVE-2024-24590 Deserialization of untrusted data can occur in...

Exploit for Deserialization of Untrusted Data in Clear Clearml

ClearML Exploit Script This repository contains a Python expl...

Exploit for Deserialization of Untrusted Data in Clear Clearml

CVE-2024-24590-ClearML-RCE-Exploit Python script that exploit...

Exploit for Deserialization of Untrusted Data in Clear Clearml

...

Exploit for Deserialization of Untrusted Data in Clear Clearml

...

erknextframegen (=0.0.1), modelcellsignaling (>=0.0.1 <=1.0.0) +1 more potentially affected by CVE-2024-24590 via clearml (>=0.17.4 <=1.10.4)

clearml PYPI version =0.17.4, =0.0.1, =0.2.19, =1.4.2 Source cves: CVE-2024-24590 Source advisory: OSV:GHSA-CPCW-9H9M-WQW9...

CVE-2024-24590

Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with...

CVE-2024-24590

Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with...

CVE-2024-24590

ClearML (Allegro AI) client SDK vulnerabilities: deserialization of untrusted data in versions 0.17.0–1.14.2 can allow remote code execution via a malicious pickle artifact. Root cause: unsafe Python pickle deserialization during artifact processing. Impact: arbitrary code execution/reverse shell...