CVE-2024-45856

mindsdb / mindsdb PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.

Affected (CNA)

Vendor / product	Versions
mindsdb / mindsdb	affected *

CWE

CWE-79

References

https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.