Clear Clearml vulnerabilities

• clear clearml enterprise server, clearml +1 more A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML... CVE-2024-39272 9.0 CriticalFebruary 6, 2025
• clear clearml enterprise server, clearml +1 more An information disclosure vulnerability exists in the Vault API functionality of ClearML... CVE-2024-43779 7.7 HighFebruary 6, 2025
• allegro.ai clearml A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro... CVE-2024-24594 9.9 CriticalFebruary 6, 2024
• allegro.ai clearml A cross-site request forgery (CSRF) vulnerability in all versions of the api and web server... CVE-2024-24593 9.6 CriticalFebruary 6, 2024
• allegro.ai clearml Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML... CVE-2024-24592 9.8 CriticalFebruary 6, 2024
• allegro.ai clearml Allegro AI ClearML path traversal vulnerability CVE-2024-24591 Fix available 8.0 HighFebruary 6, 2024
• allegro.ai clearml Allegro AI ClearML vulnerable to deserialization of untrusted data CVE-2024-24590 Public exploitFix available 8.0 HighFebruary 6, 2024
• allegro.ai clearml Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance CVE-2024-24595 6.0 MediumFebruary 5, 2024
• allegroai allegroai/clearml-server, clear clearml server +1 more Cross-site Scripting (XSS) - Stored in allegroai/clearml-server CVE-2023-6778 5.4 MediumDecember 18, 2023