Mage Mage-Ai
6 CVEs affecting Mage Mage-Ai. Latest disclosed: 2024-08-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45187 | High | 7.1 | 2024-08-23 | Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access… |
CVE-2024-45190 | Medium | 6.5 | 2024-08-23 | Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request |
CVE-2024-45189 | Medium | 6.5 | 2024-08-23 | Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request |
CVE-2024-45188 | Medium | 6.5 | 2024-08-23 | Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request |
CVE-2023-31143 | Medium | 5.9 | 2023-05-09 | mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior to 0.8.72 with user… |
CVE-2024-8072 | Medium | 5.3 | 2024-08-22 | Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users |