Skip to content
OpenAdvisories

Vendor

vertaai

2 known vulnerabilities.

Products

vertaai/modeldb 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-1961

    Path Traversal leading to Arbitrary File Write and RCE in vertaai/modeldb

    vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating t…

    vertaai vertaai/modeldb
  • High 8.6
    CVE-2023-6023 Scanner template

    ModelDB Local File Include

    An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.

    vertaai vertaai/modeldb