PT-2023-36076

Published

2023-12-11

·

Updated

2023-12-11

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions MindsDB versions prior to 23.11.4.1
Description The issue concerns a limited file write vulnerability in the file.py module. This vulnerability allows for certain unauthorized file system modifications.
Recommendations For versions prior to 23.11.4.1, update to version 23.11.4.1 or use MindsDB's staging branch, which contains a fix for the issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
PYSEC-2023-278
Found an issue in the description? Have something to add? Feel free to write us 👾