Miggo Logo
Miggo Vulnerability Database
→
CVE-2024-3575

CVE-2024-3575: Cross-site Scripting (XSS) in mindsdb/mindsdb

5.8

CVSS Score
3.0

Basic Information

CVE ID
CVE-2024-3575
GHSA ID
GHSA-93c5-rj2p-w52x
EPSS Score
0.34535%
CWE
CWE-79
Published
4/16/2024
Updated
4/16/2024
KEV Status
No
Technology
TechnologyPython

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
mindsdbpip<= 23.6.3.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

W**n * us*r uplo**s * *sv *il* t**t *ont*ins *n j*v*s*ript p*ylo** * *ross-sit* S*riptin* (XSS) is tri***r** w**n t** *il* is vi*w**. T*is is tru* *or *ot* *lou* v*rsion *n* OSS v*rsion.

Reasoning

No *n*lysis *v*il**l*