Description (CNA)
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google / Keras | affected 3.0.0 before 3.13.1 |
CWE
CWE-73, CWE-200
References
ADP enrichment
No English description supplied.
No references supplied.
A flaw was found in Keras. A remote attacker can exploit an arbitrary file read vulnerability in the model loading mechanism (HDF5 integration) by providing a specially crafted .keras model file that utilizes HDF5 external dataset references. This allows the attacker to read local files and disclose sensitive information.