repository icon
allegroai / clearml-server Project repository

ClearML - Auto-Magical CI/CD to streamline your AI workload. Experiment Management, Data Management, Pipeline, Orchestration, Scheduling & Serving in one MLOps/LLMOps solution

Submit a report

FIRST INTERACTION

WITHIN18 DAYS

REVIEW

WITHIN40 DAYS

FIX

WITHIN44 DAYS

Stored XSS on Training field name
vinit989
pending
Business Logic bypass via race conditions
vinit989
not applicable
Hard-Coded Default Credentials in `clearml-server` via `secure.conf`
ganggreentempertatum
informative
High
Name Path Traversal in "events.download_task_log"
ganggreentempertatum
not applicable
exposure secret key
ngockhanhc311
informative
High
CSRF edit profiles
ngockhanhc311
not applicable
POST based reflected XSS at file server
geraldino2
informative
None
Stored XSS in SVG Image
0xryuzak1
informative
High
Insufficient Session Expiration in allegroai / clearml-server
0xryuzak1
informative
None
Stored XSS In Project Description
ye-yint-htet-t
informative
None
Stored XSS in Project description, Reports (markdown editor component)
m0kr4n3
Medium
•CVE-2023-6778