PT-2023-17189 · Deepset Ai · Haystack
CVE-2023-1712
·
Publicado
2023-03-30
·
Atualizado
2026-06-29
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
deepset-ai/haystack versions prior to 0.1.30
deepset-ai/haystack version 1.15.0 and prior
Description
The issue is related to the use of hard-coded, security-relevant constants in the GitHub repository deepset-ai/haystack. A patch is available at commit 5fc84904f198de661d5b933fde756aa922bf09f1.
Recommendations
For versions prior to 0.1.30, update to version 0.1.30 or later.
For version 1.15.0 and prior, apply the patch available at commit 5fc84904f198de661d5b933fde756aa922bf09f1.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Haystack