Safety vulnerability ID: 71905
The information on this page was manually curated by our Cybersecurity Intelligence Team.
aimhubio/aim is vulnerable to Cross-Site Request Forgery (CSRF), allowing attackers to perform actions such as deleting runs, updating data, and stealing data like log records and notes without the user's consent. The vulnerability stems from the lack of CSRF and CORS protection in the aim dashboard. An attacker can exploit this by tricking a user into executing a malicious script that sends unauthorized requests to the aim server, leading to potential data loss and unauthorized data manipulation.
Latest version: 4.0.3
A super-easy way to record, search and compare AI experiments.
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application