CVE-2024-24759
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Résumé
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Description d'origine
La description telle que publiée par la source (souvent en anglais).
MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website with DNS Rebinding. The vulnerability can also lead to denial of service. Version 23.12.4.2 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com