MycroftAI/mycroft-core

MycroftAI/mycroft-core

GitHubGitHub
GitHubgithub.com
mycroft.aimycroft.ai
Releases134
Frequency2 weeks 1 day
Last Release
Stars6.61K
Mycroft Core, the Mycroft Artificial Intelligence platform.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2018-1000621NVD↗
<= 18.2.8b—6.8 MEDIUM

Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be exploitable remote access to the unsecured websocket server. This vulnerability appears to have been fixed in No fix currently available.