Lucene search
+L

10618 matches found

Github Security Blog
Github Security Blog
added 2024/08/23 9:30 p.m.27 views

Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

6.5CVSS6.9AI score0.00881EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/08/23 9:30 p.m.27 views

Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

6.5CVSS6.9AI score0.00859EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/08/23 9:30 p.m.28 views

Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

6.5CVSS6.9AI score0.00881EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/08/23 9:30 p.m.27 views

GHSA-CGXV-795X-3VQR Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

7.1CVSS6.7AI score0.00881EPSS
SaveExploits1References3
OSV
OSV
added 2024/08/23 9:30 p.m.13 views

GHSA-4MRC-W7JH-HX4J Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

7.1CVSS6.7AI score0.00859EPSS
SaveExploits1References3
OSV
OSV
added 2024/08/23 9:30 p.m.12 views

GHSA-V9WR-8WRM-H6P7 Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

7.1CVSS6.7AI score0.00881EPSS
SaveExploits1References3
OSV
OSV
added 2024/08/23 8:15 p.m.7 views

CVE-2024-45190

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

6.5CVSS5.9AI score0.00859EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/23 8:15 p.m.7 views

CVE-2024-45189

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

6.5CVSS5.9AI score0.00881EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/23 8:15 p.m.31 views

CVE-2024-45190

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

6.5CVSS0.00859EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/23 8:15 p.m.36 views

CVE-2024-45189

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

6.5CVSS0.00881EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/23 8:15 p.m.14 views

CVE-2024-45188

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

6.5CVSS0.00881EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/23 8:15 p.m.6 views

CVE-2024-45188

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

6.5CVSS5.9AI score0.00881EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/23 7:16 p.m.23 views

CVE-2024-45190 Mage AI pipeline interaction request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

6.5CVSS7AI score0.00859EPSS
SaveExploits1References1
CVE
CVE
added 2024/08/23 7:16 p.m.55 views

CVE-2024-45190

Mage AI suffers a path-traversal vulnerability in the Pipeline Interaction request that lets remote attackers with the Viewer role leak arbitrary files from the Mage server. The issue stems from improper handling of file paths, enabling access to sensitive server files and exposing confidentialit...

6.5CVSS6.5AI score0.00859EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2024/08/23 7:14 p.m.54 views

CVE-2024-45188

CVE-2024-45188 affects Mage AI and describes a path-traversal vulnerability in the File Content request that lets remote users with the Viewer role leak arbitrary files from the Mage server. The issue centers on improper validation of file paths, enabling access to files outside the intended scop...

6.5CVSS6.5AI score0.00881EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/23 7:14 p.m.20 views

CVE-2024-45188 Mage AI file content request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

6.5CVSS7AI score0.00881EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/08/23 7:14 p.m.28 views

CVE-2024-45188 Mage AI file content request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

6.5CVSS0.00881EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/08/23 12:0 a.m.7 views

mage-ai 安全漏洞

mage-ai is a modern replacement for Airflow in the Mage open source. A security vulnerability exists in mage-ai that stems from a path traversal vulnerability that allows a remote user with the Viewer role to leak arbitrary files from a Mage server via a Pipeline Interaction request...

6.5CVSS8.5AI score0.00859EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/23 12:0 a.m.11 views

PT-2024-31470

Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The issue allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request. Recommendations At the moment, there i...

6.5CVSS7.5AI score0.00881EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2024/08/23 12:0 a.m.9 views

PT-2024-31471

Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The issue allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request. This can potentially lead to remote...

6.5CVSS7.5AI score0.00881EPSS
SaveExploits1References14
Rows per page
Query Builder