En resumen
- CVE-2024-27321 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a refuel-autolabel, autolabel (refuel).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.35%, mayor que el 28.8% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python code, the code will be passed to an eval function which executes it.
NVD description
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python code, the code will be passed to an eval function which executes it.
Más vulnerabilidades de refuel-autolabel
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free