← CVE Intelligence

CVE-2024-3660

Arbitrary code injection vulnerability in Keras framework < 2.13 PUBLISHED

Description (CNA)

A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

Affected (CNA)

Vendor / productVersions
tensorflow / kerasaffected * before 2.13

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.