2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://mvnrepository.com","packageName":"ml.combust.mleap.mleap-tensorflow","versions":[{"lessThan":"0.23.1","status":"affected","version":"0.18.0","versionType":"maven"}]}],"source":"reefs@jfrog.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:combust:mleap:0.18.0:*:*:*:*:*:*:*","matchCriteriaId":"84FDDCAB-F580-4036-BDF5-3EBC2C7D6CB7","vulnerable":true},{"criteria":"cpe:2.3:a:combust:mleap:0.23.0:*:*:*:*:*:*:*","matchCriteriaId":"5BBED8B0-FD39-44C2-A8E9-29734D62D3BA","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.\n\nWhen creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract().\n\nArbitrary file creation can directly lead to code execution"},{"lang":"es","value":"FileUtil.extract() enumera todas las entradas del archivo zip y extrae cada archivo sin validar si las rutas de los archivos en el archivo están fuera del directorio deseado. Al crear una instancia de TensorflowModel usando el formato save_model y un modelo de tensorflow exportado, la función apply() invoca la implementación vulnerable de FileUtil.extract(). La creación arbitraria de archivos puede conducir directamente a la ejecución del código"}],"id":"CVE-2023-5245","lastModified":"2026-06-17T06:48:10.053","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.9,"source":"reefs@jfrog.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-11-15T13:15:07.457","references":[{"source":"reefs@jfrog.com","tags":["Issue Tracking","Patch"],"url":"https://github.com/combust/mleap/pull/866#issuecomment-1738032225"},{"source":"reefs@jfrog.com","tags":["Exploit","Third Party Advisory"],"url":"https://research.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"],"url":"https://github.com/combust/mleap/pull/866#issuecomment-1738032225"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://research.jfrog.com/vulnerabilities/mleap-path-traversal-rce-xray-532656/"}],"sourceIdentifier":"reefs@jfrog.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"reefs@jfrog.com","type":"Secondary"}]}
|