Lucene search
Veracode Vulnerability DatabaseVERACODE:46509HistoryApr 18, 2024 - 9:08 a.m.
Code Injection
2024-04-1809:08:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
keras
vulnerability
code injection
model sanitization
arbitrary code execution
software
keras is vulnerable to Code Injection. The vulnerability is due to improper model sanitization through the Lambda layer, allowing an attacker to inject arbitrary Python code into a model via a lambda function. If an unsuspecting developer then loads this model, arbitrary code execution occurs.
Related
cert
cert
Keras 2 Lambda Layers Allow Arbitrary Code Injection in TensorFlow Models
2024-04-16 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-3660
2024-04-16 21:15:08
nvd
nvd
CVE-2024-3660
2024-04-16 21:15:08