7 matches found
EUVD-2025-31575
Malicious code in bioql PyPI...
CVE-2025-55795
The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...
CVE-2025-55795
The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...
CVE-2025-55795
The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...
CVE-2025-55795
The openml/openml.org web application version v2.0.20241110 is vulnerable to an improper access control flaw. The issue stems from the use of incremental user IDs combined with insufficient email ownership verification during email update workflows. An authenticated attacker with a lower user ID ...
PT-2025-39831
Name of the Vulnerable Software and Affected Versions openml/openml.org web application version v2.0.20241110 Description The web application exhibits a flaw where insufficient email ownership verification during email update workflows, combined with incremental user IDs, allows an authenticated...
