CVE-2024-28425: Malicious File Upload
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28425?
CVE-2024-28425 is classified as a critical vulnerability due to the potential for arbitrary file uploads leading to arbitrary code execution.
How do I fix CVE-2024-28425?
To mitigate CVE-2024-28425, update to a version of Greykite that has patched the load_obj function to prevent file upload vulnerabilities.
What impact does CVE-2024-28425 have on Greykite?
CVE-2024-28425 allows attackers to execute arbitrary code on a server through malicious file uploads, compromising the security of affected applications.
Which versions of Greykite are affected by CVE-2024-28425?
CVE-2024-28425 affects Greykite version 1.0.0 specifically, as it contains the vulnerable load_obj function.
How can I identify if my application is vulnerable to CVE-2024-28425?
You can identify vulnerability to CVE-2024-28425 by checking if your application uses Greykite version 1.0.0 and assessing your file upload handling.