Clear: >> Clearml >> 1.14.2 Security Vulnerabilities
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
CVSS Score
8.0
EPSS Score
0.787
Published
2024-02-06
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily access, create, modify and delete files.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-02-06