rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-45819 libxl leaks data to PVH guests via ACPI tables
PVH guests have their ACPI tables constructed by the toolstack.  The
construction involves building the tables in local memory, which are
then copied into guest memory.  While actually used parts of the local
memory are filled in correctly, excess space that is being allocated is
left with its prior contents.
Affected products: vendor: Xen
product: Xen
default_status: unknown
Credits: lang: en
value: This issue was discovered by Jason Andryuk of AMD.
Published: 2024-12-19T12:00:50.271Z
CVE-2024-45823 FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets
CVE-2024-45823 IMPACT



An
authentication bypass vulnerability exists in the affected product. The
vulnerability exists due to shared secrets across accounts and could allow a threat
actor to impersonate a user if the threat actor is able to enumerate additional
information required during authentication.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Rockwell Automation
product: FactoryTalk® Batch View™
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T14:20:49.164Z
CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
CVE-2024-45824 IMPACT



A remote
code vulnerability exists in the affected products. The vulnerability occurs
when chained with Path Traversal, Command Injection, and XSS Vulnerabilities
and allows for full unauthenticated remote code execution. The link in the
mitigations section below contains patches to fix this issue.
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Rockwell Automation
product: FactoryTalk View Site Edition
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T14:05:22.202Z
CVE-2024-45825 5015-U8IHFT Denial-of-Service Vulnerability via CIP Message
CVE-2024-45825 IMPACT
A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Rockwell Automation
product: 5015-U8IHFT
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-09-12T14:28:15.825Z
CVE-2024-45826 ThinManager® Code Execution Vulnerability
CVE-2024-45826 IMPACT
Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request. If exploited, a user can install an executable file.
Problem types: cwe_id: CWE-610
description: CWE-610 Externally Controlled Reference to a Resource in Another Sphere
Affected products: vendor: Rockwell Automation
product: ThinManager
default_status: unaffected
vendor: Rockwell Automation
product: ThinManager
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T14:33:44.373Z
CVE-2024-45827 
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command.
Problem types: cwe_id: CWE-78
description: Improper neutralization of special elements used in an OS command ('OS Command Injection')
Affected products: vendor: SoftBank Corp.
product: Mesh Wi-Fi router RP562B
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2024-11-12T05:30:29.574Z
CVE-2024-45828 i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when
the ring is being stopped. Depending on timing between ring stop request
completion, interrupt handler removal and code execution this may lead
to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run
after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.
Affected products: vendor: Linux
product: Linux
default_status: unaffected
vendor: Linux
product: Linux
default_status: affected
Published: 2025-01-11T12:25:11.560Z
CVE-2024-45829 
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability.
Crafted HTTP requests may cause affected products crashed.
Problem types: cwe_id: CWE-125
description: Out-of-bounds read
Affected products: vendor: Sharp Corporation
product: Sharp Digital Full-color MFPs and Monochrome MFPs
vendor: Toshiba Tec Corporation
product: e-STUDIO 908
vendor: Toshiba Tec Corporation
product: e-STUDIO 1058
vendor: Toshiba Tec Corporation
product: e-STUDIO 1208
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.9
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Published: 2024-10-25T06:18:17.317Z
CVE-2024-45832 Ossur Mobile Logic Application Use of Hard-coded Credentials
Hard-coded credentials were included as part of the application binary. 
These credentials served as part of the application authentication flow 
and communication with the mobile application. An attacker could access 
unauthorized information.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: Ossur
product: Mobile Logic Application
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Bryan Riggins reported these vulnerabilities to CISA.
Published: 2025-01-17T16:49:56.088Z
CVE-2024-45833 Mobile password gets saved in dictionary under conditions
Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a special character..
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: @lolcabanon
Published: 2024-09-16T06:41:47.347Z
CVE-2024-45835 Insufficient Electron Fuses Configuration
Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access.
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Doyensec
Published: 2024-09-16T14:27:47.636Z
CVE-2024-45836 
Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logged-in user accesses a specific file, an arbitrary script may be executed on the web browser of the user.
Problem types: cwe_id: CWE-79
description: Cross-site scripting (XSS)
Affected products: vendor: PLANEX COMMUNICATIONS INC.
product: CS-QR10
vendor: PLANEX COMMUNICATIONS INC.
product: CS-QR20
vendor: PLANEX COMMUNICATIONS INC.
product: CS-QR22
vendor: PLANEX COMMUNICATIONS INC.
product: CS-QR220
vendor: PLANEX COMMUNICATIONS INC.
product: CS-QR300
Published: 2024-09-26T04:07:37.035Z
CVE-2024-45837 
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Problem types: cwe_id: CWE-321
description: Use of hard-coded cryptographic key
Affected products: vendor: AIPHONE CO., LTD.
product: IX-MV
vendor: AIPHONE CO., LTD.
product: IX-MV7-HB
vendor: AIPHONE CO., LTD.
product: IX-MV7-HBT
vendor: AIPHONE CO., LTD.
product: IX-MV7-HW
vendor: AIPHONE CO., LTD.
product: IX-MV7-HWT
vendor: AIPHONE CO., LTD.
product: IX-MV7-HW-JP
vendor: AIPHONE CO., LTD.
product: IX-MV7-B
vendor: AIPHONE CO., LTD.
product: IX-MV7-BT
vendor: AIPHONE CO., LTD.
product: IX-MV7-W
vendor: AIPHONE CO., LTD.
product: IX-MV7-WT
vendor: AIPHONE CO., LTD.
product: IX-DA
vendor: AIPHONE CO., LTD.
product: IX-DAU
vendor: AIPHONE CO., LTD.
product: IX-DB
vendor: AIPHONE CO., LTD.
product: IX-DBT
vendor: AIPHONE CO., LTD.
product: IX-EA
vendor: AIPHONE CO., LTD.
product: IX-EAT
vendor: AIPHONE CO., LTD.
product: IX-EAU
vendor: AIPHONE CO., LTD.
product: IX-DV
vendor: AIPHONE CO., LTD.
product: IX-DVT
vendor: AIPHONE CO., LTD.
product: IX-DVF
vendor: AIPHONE CO., LTD.
product: IX-DVF-P
vendor: AIPHONE CO., LTD.
product: IX-DVF-L
vendor: AIPHONE CO., LTD.
product: IX-DVM
vendor: AIPHONE CO., LTD.
product: IX-DU
vendor: AIPHONE CO., LTD.
product: IX-DVF-RA
vendor: AIPHONE CO., LTD.
product: IX-DVF-2RA
vendor: AIPHONE CO., LTD.
product: IX-BA
vendor: AIPHONE CO., LTD.
product: IX-BAU
vendor: AIPHONE CO., LTD.
product: IX-BB
vendor: AIPHONE CO., LTD.
product: IX-BBT
vendor: AIPHONE CO., LTD.
product: IX-FA
vendor: AIPHONE CO., LTD.
product: IX-SSA
vendor: AIPHONE CO., LTD.
product: IX-SS-2G
vendor: AIPHONE CO., LTD.
product: IX-SS-2GT
vendor: AIPHONE CO., LTD.
product: IX-SS-2G-N
vendor: AIPHONE CO., LTD.
product: IX-BU
vendor: AIPHONE CO., LTD.
product: IX-SSA-RA
vendor: AIPHONE CO., LTD.
product: IX-SSA-2RA
vendor: AIPHONE CO., LTD.
product: IX-RS-B
vendor: AIPHONE CO., LTD.
product: IX-RS-BT
vendor: AIPHONE CO., LTD.
product: IX-RS-W
vendor: AIPHONE CO., LTD.
product: IX-RS-WT
vendor: AIPHONE CO., LTD.
product: IXW-MA
vendor: AIPHONE CO., LTD.
product: IX-SPMIC
vendor: AIPHONE CO., LTD.
product: IXG-2C7
vendor: AIPHONE CO., LTD.
product: IXG-2C7-L
vendor: AIPHONE CO., LTD.
product: IXG-DM7
vendor: AIPHONE CO., LTD.
product: IXG-DM7-HID
vendor: AIPHONE CO., LTD.
product: IXG-DM7-HIDA
vendor: AIPHONE CO., LTD.
product: IXG-DM7-10K
vendor: AIPHONE CO., LTD.
product: IXG-MK
vendor: AIPHONE CO., LTD.
product: IXGW-GW
vendor: AIPHONE CO., LTD.
product: IXGW-TGW
vendor: AIPHONE CO., LTD.
product: IXGW-LC
vendor: AIPHONE CO., LTD.
product: IX-SupportTool
vendor: AIPHONE CO., LTD.
product: IXG-SupportTool
Published: 2024-11-22T00:13:01.908Z
CVE-2024-45838 goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information
The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It 
is advised to not use sensitive information in callsigns when using this
 and previous versions of the plugin. Update to current plugin version 
which uses AES-256 encryption for callsigns in encrypted operation
Problem types: cwe_id: CWE-319
description: CWE-319 Cleartext Transmission of Sensitive Information
Affected products: vendor: goTenna
product: Pro ATAK Plugin
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Erwin Karincic, Clayton Smith, and Dale Wooden reported this these vulnerabilities to CISA.
Published: 2024-09-26T17:31:45.575Z
CVE-2024-45841 
Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.
Problem types: cwe_id: CWE-732
description: Incorrect permission assignment for critical resource
Affected products: vendor: I-O DATA DEVICE, INC.
product: UD-LT1
vendor: I-O DATA DEVICE, INC.
product: UD-LT1/EX
Published: 2024-12-05T09:39:36.181Z
CVE-2024-45842 
Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability.
Unintended internal files may be retrieved when processing crafted HTTP requests.
Problem types: cwe_id: CWE-22
description: Improper limitation of a pathname to a restricted directory ('Path Traversal')
Affected products: vendor: Sharp Corporation
product: Sharp Digital Full-color MFPs and Monochrome MFPs
vendor: Toshiba Tec Corporation
product: e-STUDIO 908
vendor: Toshiba Tec Corporation
product: e-STUDIO 1058
vendor: Toshiba Tec Corporation
product: e-STUDIO 1208
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Published: 2024-10-25T06:18:23.519Z
CVE-2024-45843 Weak SSRF Filtering
Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denylist, which allows an attacker to possibly cause an SSRF if Mattermost was deployed in Oracle Cloud or Alibaba.
Problem types: cwe_id: CWE-918
description: CWE-918: Server-Side Request Forgery (SSRF)
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: DoyenSec
Published: 2024-09-26T08:03:41.827Z
CVE-2024-45844 BIG-IP monitors vulnerability
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: F5
product: BIG-IP
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: F5 acknowledges myst404 from Almond for bringing this issue to our attention and following the highest standards of coordinated disclosure.
Published: 2024-10-16T14:12:47.209Z
CVE-2024-45846 
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine, the code will be passed to an eval function and executed on the server.
Problem types: cwe_id: CWE-95
description: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T12:56:48.362Z
CVE-2024-45847 
An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server. If a specially crafted ‘UPDATE’ query containing Python code is run against a database created with the specified integration engine, the code will be passed to an eval function and executed on the server.
Problem types: cwe_id: CWE-95
description: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T12:57:42.357Z
CVE-2024-45848 
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’ query containing Python code is run against a database created with the ChromaDB engine, the code will be passed to an eval function and executed on the server.
Problem types: cwe_id: CWE-95
description: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T12:58:32.914Z
CVE-2024-45849 
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be passed to an eval function and executed on the server.
Problem types: cwe_id: CWE-95
description: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T12:59:25.993Z
CVE-2024-45850 
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for site column creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be passed to an eval function and executed on the server.
Problem types: cwe_id: CWE-95
description: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T13:00:18.531Z
CVE-2024-45851 
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list item creation. If such a query is specially crafted to contain Python code and is run against the database, the code will be passed to an eval function and executed on the server.
Problem types: cwe_id: CWE-95
description: CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T13:01:02.816Z
CVE-2024-45852 
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T13:02:29.831Z
CVE-2024-45853 
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a prediction.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: mindsdb
product: mindsdb
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-09-12T13:03:02.719Z