PyPi: Mage-Ai

CVE-2024-45188

Safety vulnerability ID: 72968

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Aug 23, 2024 Updated at Sep 19, 2024

Scan your Python projects for vulnerabilities →

Advisory

Mage AI has a path traversal vulnerability that allows remote users with the "Viewer" role to access and leak arbitrary files from the Mage server through the "File Content" request.

Affected package

mage-ai

Latest version: 0.9.74

Mage is a tool for building and deploying data pipelines.

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

https://research.jfrog.com/vulnerabilities/mage-ai-file-content-request-remote-arbitrary-file-leak-jfsa-2024-001039603/
https://github.com/advisories/GHSA-v9wr-8wrm-h6p7
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45188

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application