mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
1.2 KiB
1.2 KiB
CVE-2024-24590
Description
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
POC
Reference
No PoCs from references.
Github
- https://github.com/Milamagof/Blurry-writeup-HTB
- https://github.com/OxyDeV2/ClearML-CVE-2024-24590
- https://github.com/diegogarciayala/CVE-2024-24590-ClearML-RCE-CMD-POC
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/j3r1ch0123/CVE-2024-24590
- https://github.com/junnythemarksman/CVE-2024-24590
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/sviim/ClearML-CVE-2024-24590-RCE
- https://github.com/xffsec/CVE-2024-24590-ClearML-RCE-Exploit