Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2025/03/22 12:47 p.m.14 views

CVE-2024-8238

In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safergetattr function from RestrictedPython. This version does not protect against the str.formatmap method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution...

8.1CVSS7.3AI score0.00754EPSS
SaveExploits1References1
NVD
NVD
added 2025/03/20 10:15 a.m.9 views

CVE-2024-8238

In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safergetattr function from RestrictedPython. This version does not protect against the str.formatmap method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution...

8.1CVSS0.00754EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/03/20 10:11 a.m.17 views

CVE-2024-8238 Unrestricted Code Execution in aimhubio/aim

In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safergetattr function from RestrictedPython. This version does not protect against the str.formatmap method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution...

5.9CVSS0.00754EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/03/20 10:11 a.m.4 views

CVE-2024-8238 Unrestricted Code Execution in aimhubio/aim

In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safergetattr function from RestrictedPython. This version does not protect against the str.formatmap method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution...

5.9CVSS6AI score0.00754EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/20 10:11 a.m.9 views

CVE-2024-8238 Unrestricted Code Execution in aimhubio/aim

In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safergetattr function from RestrictedPython. This version does not protect against the str.formatmap method, allowing an attacker to leak server-side secrets or potentially gain unrestricted code execution...

5.9CVSS6.5AI score
SaveExploits0References3
Rows per page
Query Builder