CVE-2024-22476 PoC — Intel Neural Compressor 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22476.yaml

Associated Vulnerability

Title:Intel Neural Compressor 安全漏洞 (CVE-2024-22476)
Description:Intel Neural Compressor是美国英特尔（Intel）公司的一款开源项目，旨在帮助开发者轻松实现AI模型的优化。 Intel Neural Compressor 2.5.0 版本之前存在安全漏洞，该漏洞源于存在输入验证不正确问题。可能允许未经身份验证的用户通过远程访问实现权限升级。

Description

Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.

File Snapshot


 id: CVE-2024-22476

info:
  name: Intel Neural Compressor <2.5.0 - SQL Injection
  author: ritikchad

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!