CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

CVE-2024-40441

The Doccano open source annotation tools (v.1.8.4) and the Doccano Auto Labeling Pipeline module (v.0.1.23) are vulnerable to a privilege escalation flaw. The root cause is the improper handling of the model_attribs parameter , which allows a remote attacker to escalate privileges through argumen...

CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...