Vulnerabilities > CVE-2023-49795 - Unspecified vulnerability in Mindsdb
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side request forgery vulnerability in `file.py`. This can lead to limited information disclosure. Users should use MindsDB's `staging` branch or v23.11.4.1, which contain a fix for the issue.
Vulnerable Configurations
References
- https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe
- https://github.com/mindsdb/mindsdb/commit/8d13c9c28ebcf3b36509eb679378004d4648d8fe
- https://github.com/mindsdb/mindsdb/security/advisories/GHSA-34mr-6q8x-g9r6
- https://github.com/mindsdb/mindsdb/security/advisories/GHSA-34mr-6q8x-g9r6