Rasa 安全漏洞

Rasa is an open source machine learning framework for automating text- and speech-based conversations. Rasa suffers from a security vulnerability that stems from the upload of untrusted model files in the affected version. An attacker could use the vulnerability to overwrite or replace bot files ...

PT-2021-23110

Name of the Vulnerable Software and Affected Versions Rasa versions prior to 2.8.10 Description A vulnerability exists in the functionality that loads a trained model tar.gz file, allowing a malicious actor to craft a model.tar.gz file that can overwrite or replace bot files in the bot directory...

CVE-2021-41127: Improper Limitation of a Pathname to a Restricted Directory

Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model tar.gz file which allows a malicious actor to craft a model.tar.gz file which can overwrite or replace bot...