MindsDB Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-45856 · ADVISORY
• hiddenlayer.com/sai-security-advisory/2024-09-mindsdb · WEB
• hiddenlayer.com/sai-security-advisory/2024-09-mindsdb · Exploit
• pypi.org/project/mindsdb · PACKAGE
• GitHub Advisory GHSA-32fj-r8qw-r8w8 · ADVISORY

Weitere Schwachstellen in mindsdb

• CVE-2026-7711HOCH 7.3A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler…
• CVE-2026-27483HOCH 8.8MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulner…
• CVE-2026-2531HOCH 7.3A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mind…
• CVE-2025-68472KRITISCH 9.1MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal…
• CVE-2024-45855HOCH 7.5Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhous…