What is GHSA-cgrq-wvfj-v28j?

GHSA-cgrq-wvfj-v28j is a security advisory published by GitHub Security Advisories with Medium severity. Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

Which CVE IDs does GHSA-cgrq-wvfj-v28j cover?

GHSA-cgrq-wvfj-v28j covers the following CVE IDs: CVE-2024-8072. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cgrq-wvfj-v28j?

GHSA-cgrq-wvfj-v28j has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-cgrq-wvfj-v28j?

GHSA-cgrq-wvfj-v28j affects 1 product, including: pip/mage-ai:\u003c= 0.9.73.

GHSA-cgrq-wvfj-v28jMediumCVSS 5.3

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

Vendor

GitHub Security Advisories

Published

August 22, 2024

Last Modified

August 22, 2024

🔗 CVE IDs covered (1)

CVE-2024-8072 →

📋 Description

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users.

🎯 Affected products1

pip/mage-ai:<= 0.9.73

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-8072
https://research.jfrog.com/vulnerabilities/mage-ai-terminal-server-infoleak-jfsa-2024-001039574
https://github.com/advisories/GHSA-cgrq-wvfj-v28j