What is CVE-2024-8101?

CVE-2024-8101 is a medium-severity vulnerability in Aimhubio Aimhubio/aim, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-03-20.

How severe is CVE-2024-8101?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Aimhubio Aimhubio/aim

CVE-2024-8101

A stored cross-site scripting (XSS) vulnerability exists in the Text Explorer component of aimhubio/aim version 3.23.0. The vulnerability arises due to the use of `dangerouslySetInnerHTML` without proper sanitization, allowing arbitrary JavaScript execution when rendering tracked texts. This can be exploited by injecting malicious HTML content during the training process, which is then rendered unsanitized in the Text Explorer.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (32.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Aimhubio Aimhubio/aim — versions unspecified
Aimstack Aim — versions 3.23.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@huntr.dev (Exploit)

Frequently asked questions

What is CVE-2024-8101?: CVE-2024-8101 is a medium-severity vulnerability in Aimhubio Aimhubio/aim, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-03-20.
How severe is CVE-2024-8101?: Medium severity. CVSS v3 base score is 6.1 out of 10.