← CVE Intelligence

CVE-2024-39272

ClearML / ClearML PUBLISHED

Description (CNA)

A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to an arbitrary html code. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
ClearML / ClearMLaffected Enterprise Server 3.22.5-1533

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.