CVE-2024-28425
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to e…
Published: 2024-03-14 · CVSS: 7.5 · CVSS 3.1
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7