https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:51:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-24971 cnvd-2024-24971 https://cve.radiocsirt.org/vuln/cnvd-2024-24971 https://cve.radiocsirt.org/vuln/euvd-2026-160733 EUVD-2026-160733 https://cve.radiocsirt.org/vuln/euvd-2026-160733 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1961 <p>vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating the &#39;artifact_path&#39; parameter. This flaw can lead to Remote Code Execution (RCE) by overwriting critical files, such as the application&#39;s configuration file, especially when the application is run outside of Docker. The vulnerability is present in the NFSController.java and NFSService.java components of the application.</p> <p>vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating the &#39;artifact_path&#39; parameter. This flaw can lead to Remote Code Execution (RCE) by overwriting critical files, such as the application&#39;s configuration file, especially when the application is run outside of Docker. The vulnerability is present in the NFSController.java and NFSService.java components of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1961 https://cve.radiocsirt.org/vuln/ghsa-j9q5-gh3m-3cf9 <p>vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating the &#39;artifact_path&#39; parameter. This flaw can lead to Remote Code Execution (RCE) by overwriting critical files, such as the application&#39;s configuration file, especially when the application is run outside of Docker. The vulnerability is present in the NFSController.java and NFSService.java components of the application.</p> <p>vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating the &#39;artifact_path&#39; parameter. This flaw can lead to Remote Code Execution (RCE) by overwriting critical files, such as the application&#39;s configuration file, especially when the application is run outside of Docker. The vulnerability is present in the NFSController.java and NFSService.java components of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-j9q5-gh3m-3cf9 https://cve.radiocsirt.org/vuln/gsd-2024-1961 gsd-2024-1961 https://cve.radiocsirt.org/vuln/gsd-2024-1961