{"action":"Upgrade mindsdb to 23.12.4.2 or later.","affected":[{"fixed":"23.12.4.2","introduced":"0"}],"component":"mindsdb","cve_ids":["CVE-2024-24759"],"ecosystem":"PyPI","epss":0.04936,"exploited":false,"fixed_versions":["23.12.4.2"],"ghsa_id":"GHSA-4jcv-vp96-94xr","id":"tcs_01M5KEYEQVJHFZ01ZZCFA8K35M","modified_at":"2024-11-27T05:26:05.597593Z","published_at":"2024-09-05T16:37:56Z","references":["https://osv.dev/vulnerability/GHSA-4jcv-vp96-94xr","https://github.com/mindsdb/mindsdb/security/advisories/GHSA-4jcv-vp96-94xr","https://nvd.nist.gov/vuln/detail/CVE-2024-24759","https://github.com/mindsdb/mindsdb/commit/5f7496481bd3db1d06a2d2e62c0dce960a1fe12b","https://github.com/mindsdb/mindsdb"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-4jcv-vp96-94xr","url":"https://osv.dev/vulnerability/GHSA-4jcv-vp96-94xr"}],"summary":"MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding"}