CVE-2023-49795
MindsDB Server-Side Request Forgery vulnerability
Résumé
MindsDB Server-Side Request Forgery vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in file.py. This can lead to limited information disclosure. Users should use MindsDB's staging branch or v23.11.4.1, which contain a fix for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com