Threats tagged 'ghsa-mxvw-cj37-8g2h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.8%	CVE-2024-2195 · Aim Web API vulnerable to Remote Code Execution Critical9.8EPSS 1.8%2024-04-10GCVE Database A critical Remote Code Execution (RCE) vulnerability (CVE-2024-2195) affects the aim project versions 3.0.0 through 3.25.0. The flaw exists in the /api/runs/search/run/ endpoint due to improper access restriction in the run_search_api function, allowing attackers to execute arbitrary code via the query parameter. This can lead to full system compromise. EPSS 1.8%Vulnerability CWE-94 #ghsa-mxvw-cj37-8g2h #pypi	GCVE Database	2024-04-10

Page 1 of 1