CVE-2024-2195

A critical Remote Code Execution RCE vulnerability was identified in the aimhubio/aim project, specifically within the "/api/runs/search/run/" endpoint, affecting versions = 3.0.0. The vulnerability resides in the "runsearchapi" function of the "aim/web/api/runs/views.py" file, where improper...

CVE-2024-2195: Improper Control of Generation of Code

A critical Remote Code Execution RCE vulnerability was identified in the aimhubio/aim project, specifically within the /api/runs/search/run/ endpoint, affecting versions = 3.0.0. The vulnerability resides in the runsearchapi function of the aim/web/api/runs/views.py file, where improper restricti...