Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-45856
9
CRITICALCVSS v3
Published
September 12, 2024
Affected
1 project
Assigned by
6f8de1f0-f67e-45a6-b68f-98777fdb759c
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.
themavik/mindsdb
GitHubQuery Engine for AI Analytics: Build self-reasoning agents across all your live data
GitHubQuery Engine for AI Analytics: Build self-reasoning agents across all your live dataall versions, <= 24.9.2.1NVD