7.5
High
CVE-2024-8020 A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by…
Description
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| lightning-ai/pytorch-lightning | Versions not published |
Other CVEs of lightning-ai/pytorch-lightning
The 4 CVEs of lightning-ai/pytorch-lightning →
CVE-2024-8019
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a…
9.1
Critical
CVE-2024-5980
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path…
9.1
Critical
CVE-2024-5452
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to…
9.8
Critical