CoreCVE
Back

MEDIUM

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter

Published Sep 23, 2024

Description

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Sep 23, 2024
Updated Sep 24, 2024
Reserved Jul 5, 2024
Link CVE-2024-40441

CISA Vulnrichment

Updated Sep 24, 2024

NVD

Status Deferred
Modified Jun 17, 2026
Link CVE-2024-40441

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Sep 23, 2024
Updated Sep 24, 2024
Link EUVD-2024-38457

GitHub

No data