Skip to content
OpenAdvisories
Critical · 9.0 CVE-2024-39272 EUVD-2024-53884GHSA-q53q-67p3-fpjw

A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially…

Published Feb 6, 2025 · Updated Feb 12, 2025 · Assigned by talos

Vendor: ClearML Product: ClearML

Description

A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to an arbitrary html code. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
ClearML ClearML Enterprise Server 3.22.5-1533 —

References