Aller au contenu
Se connecter
7.5 Élevée

CVE-2024-27318 Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data…

Description

Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.

Produits et versions touchés

Produit Versions touchées Corrigé en
onnx 1.15 premières → 1.15.0 Pas de correctif indiqué
onnx 1.15 premières → 1.15.0 Pas de correctif indiqué

Autres CVE de onnx

Les 14 CVE de onnx →
CVE-2026-115922 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability 6.2 Moyenne CVE-2026-115921 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability 6.2 Moyenne CVE-2026-115920 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability 6.2 Moyenne CVE-2026-115919 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability 6.2 Moyenne
Suivre cette CVE