Threats tagged 'ghsa-ww28-4m4v-cq4j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.4%	CVE-2025-49652Backend.ai · BackendAI Missing Authentication for Critical Function Critical9.8EPSS 0.4%2025-06-09GCVE DatabaseCVE-2025-49652 CVE-2025-49652 is a critical vulnerability in Lablup's BackendAI where the registration feature lacks proper authentication. This flaw allows arbitrary users to create accounts and access private data even if registration is disabled. The vulnerability affects versions prior to 25.15.6 and versions from 25.16.0rc1 up to but not including 25.19.0rc1. A fix is available in versions 25.15.6 and 25.19.0rc1. EPSS 0.4%Report on CVE-2025-49652 Vulnerability CWE-306 #ghsa-ww28-4m4v-cq4j #pypi	GCVE Database	2025-06-09

Page 1 of 1