CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40441

The Doccano open source annotation tools (v.1.8.4) and the Doccano Auto Labeling Pipeline module (v.0.1.23) are vulnerable to a privilege escalation flaw. The root cause is the improper handling of the model_attribs parameter , which allows a remote attacker to escalate privileges through argumen...

PT-2024-28848 · Doccano · Doccano

Name of the Vulnerable Software and Affected Versions: Doccano Open source annotation tools for machine learning practitioners version 1.8.4 Doccano Auto Labeling Pipeline module to annotate a document automatically version 0.1.23 Description: The issue allows a remote attacker to escalate...

Doccano security vulnerabilities

doccano is an open source human text annotation tool from doccano open source. A security vulnerability exists in Doccano v1.8.4 and earlier versions. A remote attacker exploited the vulnerability to elevate privileges via a specially crafted REST request...

CVE-2024-40441: Server-Side Request Forgery (SSRF)

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

celery-smartbase (>=0.3.1, <=0.3.3), doccano (>=1.6.0, <=1.8.0) +5 more potentially affected by CVE-2020-17495 via django-celery-results (>=2.2.0, <=2.3.1)

django-celery-results PYPI version =2.2.0, =0.3.1, =1.6.0, =3.3.3, =1.3.4.7, =1.0.3, =3.6.0, =3.7.3 - vmcenter 1.2.0rc3 Source cves: CVE-2020-17495 Source advisory: OSV:GHSA-FVX8-V524-8579...

celery-smartbase (>=0.3.1, <=0.3.3), doccano (>=1.6.0, <=1.8.0) +5 more potentially affected by CVE-2020-17495 via django-celery-results (>=2.2.0, <=2.3.1)

django-celery-results PYPI version =2.2.0, =0.3.1, =1.6.0, =3.3.3, =1.3.4.7, =1.0.3, =3.6.0, =3.7.3 - vmcenter 1.2.0rc3 Source cves: CVE-2020-17495 Source advisory: GHSA-FVX8-V524-8579...

celery-smartbase (>=0.3.1, <=0.3.3), doccano (>=1.6.0, <=1.8.0) +5 more potentially affected by CVE-2020-17495 via django-celery-results (>=2.2.0, <=2.3.1)

django-celery-results PYPI version =2.2.0, =0.3.1, =1.6.0, =3.3.3, =1.3.4.7, =1.0.3, =3.6.0, =3.7.3 - vmcenter 1.2.0rc3 Source cves: CVE-2020-17495 Source advisory: MEND:CVE-2020-17495...