Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Remote code execution in onyxia-api
Vulnerability Description
Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a state of art working environment for data scientists. This critical vulnerability allows authenticated users to remotely execute code within the Onyxia-API, leading to potential consequences such as unauthorized access to other user environments and denial of service attacks. This issue has been patched in api versions 4.2.0, 3.1.1, and 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Information
N/A
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
Onyxia 代码注入漏洞
Vulnerability Description
Onyxia是InseeFrLab开源的一款网络应用程序，旨在成为多种开源后端技术之间的粘合剂。 Onyxia 4.2.0之前版本、3.1.1之前版本和2.8.2之前版本存在代码注入漏洞，该漏洞源于经过身份验证的用户能够远程在Onyxia-API中执行代码，可能导致未经授权访问其他用户环境和拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A