PT-2023-36076
Published
2023-12-11
·
Updated
2023-12-11
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MindsDB versions prior to 23.11.4.1
Description
The issue concerns a limited file write vulnerability in the
file.py module. This vulnerability allows for certain unauthorized file system modifications.Recommendations
For versions prior to 23.11.4.1, update to version 23.11.4.1 or use MindsDB's
staging branch, which contains a fix for the issue.Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾