Vulnerabilities > CVE-2024-24590 - Deserialization of Untrusted Data vulnerability in Clear Clearml
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |