CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

CVE-2024-40441

CVE-2024-40441 describes a privilege-escalation flaw in Doccano’s open‑source tooling: the Doccano Open Source Annotation Tools for ML practitioners (v1.8.4) and the Doccano Auto Labeling Pipeline (v0.1.23) mishandle the model_attribs parameter, enabling remote attackers to elevate privileges. Ro...