← volver
CVE-2024-52524

ReDoS in Giskard Scan text perturbation

CVSS 6.9 MEDIUMEPSS 0.8%CWE-1333
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.9EPSS 0.8%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
14 nov 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Giskard is an evaluation and testing framework for AI systems. A Remote Code Execution (ReDoS) vulnerability was discovered in Giskard component by the GitHub Security Lab team. When processing datasets with specific text patterns with Giskard detectors, this vulnerability could trigger exponential regex evaluation times, potentially leading to denial of service. Giskard versions prior to 2.15.5 are affected.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Clear
Productos afectados
Giskard-AI · giskard

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →