CVE-2024-24590

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-24590
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24590.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-24590
Aliases
Published
2024-02-06T14:40:26.963Z
Modified
2026-08-12T03:51:22.544883884Z
Severity
  • 8.0 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

Database specific 
{
    "cna_assigner": "HiddenLayer",
    "cwe_ids": [
        "CWE-502"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24590.json"
}
References

Affected packages

Git / github.com/clearml/clearml

Affected ranges

Type
GIT
Repo
https://github.com/clearml/clearml
Events
Introduced
c8e0e6b7407a9801e9029cea94a3ec552fa85a32
Fixed
0594a5ac8504d090bb851265f4f5c02c8d862dde
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.17.0"
        },
        {
            "fixed": "1.14.3"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.17.0
0.17.1
0.17.2
0.17.3
0.17.4
0.17.5
0.17.5rc3
0.17.5rc5
0.17.5rc6
1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.4rc0
1.0.4rc1
1.0.5
1.0.6rc1
1.0.6rc2
1.1.0
1.1.1
1.1.2rc0
1.1.3rc0
1.1.5rc1
1.1.5rc2
Other
untagged-38cec581542f7f989ef9
v0.*
v0.17.5rc2
v0.17.5rc4
v1.*
v1.1.3
v1.1.4
v1.1.4rc0
v1.1.5
v1.1.5rc0
v1.1.5rc3
v1.1.5rc4
v1.1.5rc5
v1.1.5rc6
v1.1.5rc7
v1.1.6
v1.1.6rc0
v1.10.0
v1.10.0_fix
v1.10.1
v1.10.2
v1.10.3
v1.11.0
v1.11.1
v1.11.1rc0
v1.11.1rc1
v1.11.1rc2
v1.11.2rc0
v1.12.0
v1.12.1
v1.12.2
v1.12.2rc0
v1.13.0
v1.13.1
v1.13.2
v1.13.3rc0
v1.13.3rc1
v1.14.0
v1.14.0rc0
v1.14.1
v1.14.2
v1.14.2rc0
v1.14.3rc0
v1.2.0
v1.2.0rc0
v1.2.0rc1
v1.2.0rc2
v1.2.1
v1.2.1rc0
v1.3.0
v1.3.1
v1.3.1rc0
v1.3.2
v1.3.2rc0
v1.3.2rc2
v1.3.2rc3
v1.3.3rc0
v1.3.3rc1
v1.4.0
v1.4.1rc0
v1.4.2rc0
v1.4.2rc1
v1.5.0
v1.6
v1.6.1
v1.6.2
v1.6.3
v1.6.3rc0
v1.6.3rc1
v1.6.3rc2
v1.6.4
v1.6.5rc0
v1.6.5rc1
v1.7.0
v1.7.0rc0
v1.7.0rc1
v1.7.1
v1.7.1rc0
v1.7.1rc1
v1.7.1rc2
v1.7.2
v1.7.2rc0
v1.7.2rc1
v1.7.2rc2
v1.7.3rc0
v1.8.0
v1.8.1
v1.8.2
v1.8.3
v1.8.4rc0
v1.8.4rc1
v1.8.4rc2
v1.9.0
v1.9.1
v1.9.2
v1.9.2rc0
v1.9.2rc1
v1.9.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24590.json"