PyPi: Mage-Ai

CVE-2024-45190

Safety vulnerability ID: 72970

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Aug 23, 2024 Updated at Sep 19, 2024

Scan your Python projects for vulnerabilities →

Advisory

Mage AI has a path traversal vulnerability that allows remote users with the "Viewer" role to leak arbitrary files from the Mage server via the "Pipeline Interaction" request.

Affected package

mage-ai

Latest version: 0.9.74

Mage is a tool for building and deploying data pipelines.

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

https://research.jfrog.com/vulnerabilities/mage-ai-pipeline-interaction-request-remote-arbitrary-file-leak-jfsa-2024-001039605/
https://github.com/advisories/GHSA-4mrc-w7jh-hx4j
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45190

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application