Vulnerabilities (CVE)

Filtered by vendor Clear Subscribe
Filtered by product Clearml Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6778 1 Clear 1 Clearml Server 2023-12-22 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0. This vulnerability affects the ClearML Open Source Server which is not designed to be used as a publicly available service. Security recommendations stress it should be placed behind a company firewall or VPN. This vulnerability only affects users within the same organisation (I.e when a malicious party already has access to the internal network and to a user's ClearML login credentials).