CVE-2024-45190

Mage AI pipeline interaction request remote arbitrary file leak PUBLISHED

Description (CNA)

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0

CWE

CWE-35

References

https://research.jfrog.com/vulnerabilities/mage-ai-pipeline-interaction-request-remote-arbitrary-file-leak-jfsa-2024-001039605/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.