CVE-2024-45851
2 advisories.
PyPI/mindsdb CVE-2024-45851: high 8.8
MindsDB Eval Injection vulnerability
Action: Upgrade mindsdb to 24.7.4.1 or later.
pip install mindsdb==24.7.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 23.10.5.0 | 24.7.4.1 | - |
Fixed versions
| 24.7.4.1 |
Sources
- osv: GHSA-wf9g-c67g-h4ch
- https://nvd.nist.gov/vuln/detail/CVE-2024-45851
- https://github.com/mindsdb/mindsdb/commit/11a4db792ad36cf704f7307c7602128b17752c80
- https://github.com/mindsdb/mindsdb
- https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-81.yaml
- https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb
CVE-2024-45851 · published · modified · JSON
PyPI/mindsdb CVE-2024-45851: high 8.8
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Action: Upgrade mindsdb to 24.7.4.1 or later.
pip install mindsdb==24.7.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 23.10.5.0 | 24.7.4.1 | - |
Fixed versions
| 24.7.4.1 |
Sources
- osv: PYSEC-2024-81
- https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/
- https://github.com/advisories/GHSA-wf9g-c67g-h4ch
CVE-2024-45851 · published · modified · JSON