CVE-2023-28635
3 advisories.
PyPI/vantage6 CVE-2023-28635: medium 5.4
Defining resource name as integer may give unintended access in vantage6
Action: Upgrade vantage6 to 4.0.0 or later.
pip install vantage6==4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-7x94-6g2m-3hp2
- https://github.com/vantage6/vantage6/security/advisories/GHSA-7x94-6g2m-3hp2
- https://nvd.nist.gov/vuln/detail/CVE-2023-28635
- https://github.com/vantage6/vantage6/pull/744
- https://github.com/vantage6/vantage6/commit/aacfc24548cbf168579d2e13b2ddaf8ded715d36
- https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-198.yaml
- https://github.com/vantage6/vantage6
- https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
CVE-2023-28635 · published · modified · JSON
PyPI/vantage6-node CVE-2023-28635: medium 5.4
vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with int
Action: Upgrade vantage6-node to 4.0.0 or later.
pip install vantage6-node==4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: PYSEC-2023-198
- https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
- https://github.com/vantage6/vantage6/security/advisories/GHSA-7x94-6g2m-3hp2
- https://github.com/vantage6/vantage6/pull/744
CVE-2023-28635 · published · modified · JSON
PyPI/vantage6 CVE-2023-28635: medium 5.4
Defining resource name as integer may give unintended access in vantage6
Action: Upgrade vantage6 to 4.0.0 or later.
pip install vantage6==4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: PYSEC-2026-2006
- https://github.com/vantage6/vantage6/security/advisories/GHSA-7x94-6g2m-3hp2
- https://nvd.nist.gov/vuln/detail/CVE-2023-28635
- https://github.com/vantage6/vantage6/pull/744
- https://github.com/vantage6/vantage6/commit/aacfc24548cbf168579d2e13b2ddaf8ded715d36
- https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-198.yaml
- https://github.com/vantage6/vantage6
- https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
- https://pypi.org/project/vantage6
- https://github.com/advisories/GHSA-7x94-6g2m-3hp2
CVE-2023-28635 · published · modified · JSON