7.5
Élevée
CVE-2024-8020 A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by…
Description
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| lightning-ai/pytorch-lightning | Versions non publiées |
Références
- huntr.com huntr.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de lightning-ai/pytorch-lightning
Les 4 CVE de lightning-ai/pytorch-lightning →
CVE-2024-8019
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a…
9.1
Critique
CVE-2024-5980
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path…
9.1
Critique
CVE-2024-5452
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to…
9.8
Critique