CVE-2024-8020 — Denial of Service in lightning-ai/pytorch-lightning

CVE-2024-8020

Denial of Service in lightning-ai/pytorch-lightning PUBLISHED

Description (CNA)

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

Affected (CNA)

Vendor / product	Versions
lightning-ai / lightning-ai/pytorch-lightning	affected unspecified through latest

CWE

CWE-248

References

https://huntr.com/bounties/8b642a78-2b80-4fb0-9b2f-8ba0ff37db6a

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.