CVE-2023-6778 (published 2023-12-18T14:54:28.968Z)
Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0. This vulnerability affects the ClearML Open Source Server which is not designed to be used as a publicly available service. Security recommendations stress it should be placed behind a company firewall or VPN. This vulnerability only affects users within the same organisation (I.e when a malicious party already has access to the internal network and to a user's ClearML login credentials).
Affected products: Vendor: allegroai
Product: allegroai/clearml-server
Versions: unspecified