Path Traversal in nemo-toolkit

MEDIO 4.4CVE-2022-22821 · GHSA-9hg3-hmmf-c3gr · GHSA-rpx7-33j2-xx9x · Published 10/01/2022 · updated 17/06/2026

In breve

CVE-2022-22821 è una vulnerabilità MEDIO (CVSS 4.4) che riguarda nemo-toolkit, nemo (nvidia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.31%, superiore al 23.9% delle vulnerabilità.
Correzione: aggiornare a 1.6.0 o successiva.

Package	Affected versions	Patched versions
nemo-toolkit PyPI	`< 1.6.0`	`1.6.0`
nemo nvidia	`< 1.6.0`	`1.6.0`

Description

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

NVD description

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

References

NVIDIA/NeMo security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-22821 · ADVISORY
NVIDIA/NeMo · PACKAGE
NVIDIA/NeMo commit f7e4ed7 · WEB
pypi.org/project/nemo-toolkit · PACKAGE
GitHub Advisory GHSA-9hg3-hmmf-c3gr · ADVISORY

Altre vulnerabilità di nemo-toolkit

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nemo-toolkit

PyPI

< 1.6.0

1.6.0

nemo

nvidia

< 1.6.0

1.6.0

Description

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

NVD description

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

Altre vulnerabilità di nemo-toolkit

Vedi tutto →