Lucene search
Veracode Vulnerability DatabaseVERACODE:48550HistoryAug 26, 2024 - 6:04 a.m.
Path Traversal
2024-08-2606:04:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
mage ai
path traversal
input validation
remote users
viewer" role
mage server
git content" request
vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
19.7%
Mage AI is vulnerable to Path Traversal. The vulnerability is due to improper input validation, allowing remote users with the “Viewer” role to leak arbitrary files from the Mage server through the “Git Content” request.
Related
nvd
nvd
CVE-2024-45189
2024-08-23 20:15:08
github
github
Mage AI Path Traversal vulnerability
2024-08-23 21:30:42
cve
cve
CVE-2024-45189
2024-08-23 20:15:08
cvelist
cvelist
CVE-2024-45189 Mage AI git content request remote arbitrary file leak
2024-08-23 19:15:40
vulnrichment
vulnrichment
CVE-2024-45189 Mage AI git content request remote arbitrary file leak
2024-08-23 19:15:40
osv
osv
Mage AI Path Traversal vulnerability
2024-08-23 21:30:42
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
19.7%
Related for VERACODE:48550