Vulnerability CVE-2024-24594
Published: 2024-02-06

Description:
A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro AI??s ClearML platform allows a remote attacker to execute a JavaScript payload when a user views the Debug Samples tab in the web UI.

 References:
https://hiddenlayer.com/research/not-so-clear-how-mlops-solutions-can-muddy-the-waters-of-your-supply-chain/
Copyright 2026, cxsecurity.com

 

Back to Top