Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ONNX 路径遍历漏洞
Vulnerability Description
ONNX（Open Neural Network Exchange）是ONNX开源的一个机器学习互操作性的开放标准。 ONNX 1.17.0版本存在安全漏洞，该漏洞源于onnx.external_data_helper.save_external_data存在路径遍历漏洞，可能导致覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A