Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mage AI git content request remote arbitrary file leak
Vulnerability Description
Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
mage-ai 安全漏洞
Vulnerability Description
mage-ai是Mage开源的一个 Airflow 的现代替代品。 mage-ai 存在安全漏洞，该漏洞源于存在路径遍历漏洞，允许具有Viewer角色的远程用户通过Git Content请求从Mage服务器泄露任意文件。
CVSS Information
N/A
Vulnerability Type
N/A