Mage AI Path Traversal vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-45188 · ADVISORY
• mage-ai/mage-ai · PACKAGE
• research.jfrog.com/vulnerabilities/mage-ai-file-content-request-remote-arbitrary-file-leak-jfsa-2024-001039603 · WEB
• research.jfrog.com/vulnerabilities/mage-ai-file-content-request-remote-arbitrary-file-leak-jfsa-2024-001039603 · Exploit
• pypi.org/project/mage-ai · PACKAGE
• GitHub Advisory GHSA-v9wr-8wrm-h6p7 · ADVISORY

Más vulnerabilidades de mage-ai

• CVE-2024-45190MEDIO 6.5Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Int…
• CVE-2024-45189MEDIO 6.5Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content"…
• CVE-2024-45187ALTO 8.8Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specif…
• CVE-2024-8072MEDIO 5.3Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
• CVE-2023-31143CRÍTICO 9.8mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior …