CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-24592
Critical (9.8) in clear clearml. EPSS 1.0% chance of exploitation in the next 30 days.
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily access, create, modify and delete files.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-425
- Published
- Modified
- Record from
- the NVD, synced
Affected
- clear:clearml