Allegro.AI ClearML vulnerabilities
6 published CVEs name Allegro.AI ClearML among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-24594
A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro AI’s ClearML platform allows a remote attacker to execute a…
Allegro.AI · ClearML
Critical9.9 - CVE-2024-24593
A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro AI’s ClearML platform allows a remote…
Allegro.AI · ClearML
Critical9.6 - CVE-2024-24592
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily access, create,…
Allegro.AI · ClearML
Critical9.8 - CVE-2024-24591
A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a maliciously uploaded dataset to write…
Allegro.AI · ClearML
High8.0 - CVE-2024-24590
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded…
Allegro.AI · ClearML
High8.0 - CVE-2024-24595
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user…
Allegro.AI · ClearML
Medium6.0