CVE-2024-45189

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request

Score

CVSS 3.1 6.5 Medium

Status

Modified - reefs@jfrog.com

Published

2024-08-23

Last modified

2024-11-25

Weaknesses

CWE-22

Affected products

• Mage-ai (Mage)

References

• https://research.jfrog.com/vulnerabilities/mage-ai-git-content-request-remote-arbitrary-file-leak-jfsa-2024-001039604/