Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Computer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpoints
Vulnerability Description
Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account may retrieve certain information about any project, task, job or membership resource on the CVAT instance. The information exposed in this way is the same as the information returned on a GET request to the resource. In addition, the attacker can also alter the default source and target storage associated with any project or task. Upgrade to CVAT 2.19.1 or any later version to fix the issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
授权机制不正确
Vulnerability Title
Computer Vision Annotation Tool 安全漏洞
Vulnerability Description
Computer Vision Annotation Tool（CVAT）是cvat.ai开源的一种用于计算机视觉的交互式视频和图像注释工具。 Computer Vision Annotation Tool 2.0.0版本至2.19.0版本存在安全漏洞，该漏洞源于拥有帐户的攻击者可以检索有关CVAT实例上的任何项目、任务、作业或成员资格资源的某些信息。
CVSS Information
N/A
Vulnerability Type
N/A