CSRF in Polyaxon Polyaxon/polyaxon
CVE-2024-9365
A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability includes potential data loss and service disruption.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.002 (14.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.
Affected products
- Polyaxon Polyaxon/polyaxon — versions unspecified
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-9365?
- CVE-2024-9365 is a medium-severity vulnerability in Polyaxon Polyaxon/polyaxon, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2025-03-20.
- How severe is CVE-2024-9365?
- Medium severity. CVSS v3 base score is 6.5 out of 10.