Webank: Security Vulnerabilities
An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-06-16
A Directory Traversal vulnerability exists in WeBankPartners wecube-platform 3.2.1 via the file variable in PluginPackageController.java.
CVSS Score
7.5
EPSS Score
0.006
Published
2022-02-24