~ / search / GHSA-cgxv-795x-3vqr

GHSA-cgxv-795x-3vqr

Mage AI Path Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-45189

Packages

EcosystemPackageAffectedFixed in
PyPI mage-ai <= 0.9.73 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request

References

External links from the advisory. They lead to third-party sites.