CVE-2024-9365mediumCWE-352

CVE-2024-9365: medium-severity vulnerability in polyaxon/polyaxon

Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon

Published

Follow this CVE+ Monitor polyaxon/polyaxon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.2%
A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability includes potential data loss and service disruption.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
polyaxon · polyaxon/polyaxon
Related CVEs — polyaxon/polyaxon

In the same product, most dangerous first.

CVE-2024-9362HIGHDirectory Traversal in polyaxon/polyaxonEPSS 4.4%CVE-2024-9363HIGHUnauthorized File Deletion in polyaxon/polyaxonEPSS 1.1%