A vulnerability was detected in MosaicML Composer up to 0.32.1.
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted early about this disclosure.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- PHP
- Product
- PHP
- CVSS
- 6.3
- Exposure class
- Web platform
Why it ranks 8 (Routine)
- CVSS 6.3 medium
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.