Cross-site Scripting (XSS) in mindsdb/mindsdb

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-3575 · ADVISORY
• mindsdb/mindsdb · PACKAGE
• pypa/advisory-database · WEB
• huntr.com/bounties/5f720b48-ddeb-4f2a-830f-a3dd15d5daa2 · WEB
• GitHub Advisory GHSA-93c5-rj2p-w52x · ADVISORY

mindsdb のその他の脆弱性

• CVE-2026-7711高 7.3A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler…
• CVE-2026-27483高 8.8MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulner…
• CVE-2026-2531高 7.3A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mind…
• CVE-2025-68472緊急 9.1MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal…
• CVE-2024-45856中 5.4A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload wh…