Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/11/10 5:22 a.m.3 views

CVE-2025-64485

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

5.3CVSS6.7AI score0.0011EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/07 11:21 p.m.3 views

EUVD-2025-38341

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

5.3CVSS6.2AI score0.0011EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/07 11:21 p.m.3 views

CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

5.3CVSS6.3AI score0.0011EPSS
Exploits0References2
OSV
OSV
added 2025/11/07 11:21 p.m.4 views

CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

5.3CVSS6.7AI score0.0011EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/11/07 11:21 p.m.21 views

CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...

5.3CVSS0.0011EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45521

Name of the Vulnerable Software and Affected Versions CVAT versions 2.4.0 through 2.48.1 Description CVAT is an interactive video and image annotation tool for computer vision. A user with the User global role can potentially create or overwrite files in the root of a mounted file share. If a fil...

5.3CVSS6.7AI score0.0011EPSS
Exploits0References6
Rows per page
Query Builder