Polyaxon/Polyaxon
Approved changes feed: RSS · Atom
cpe:2.3:a:polyaxon:polyaxon/polyaxon:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Polyaxon (625b1850-5be5-57c3-b12f-67b824366595) |
|---|---|
| Product | Polyaxon/Polyaxon (6c65b96c-1d27-5ae9-9b53-c535c2c2c2a5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9365 |
vulnerable | 2026-06-08 07:00:27.197198 |
Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon
MEDIUM (6.5)
A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability includes potential data loss and service disruption.
Published: 2025-03-20T10:10:43.972Z
Updated: 2025-03-20T18:17:34.295Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9363 |
vulnerable | 2026-06-08 07:00:27.194511 |
Unauthorized File Deletion in polyaxon/polyaxon
HIGH (7.5)
An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers. An attacker can delete important files within the containers, such as `polyaxon.sock`, causing the API container to exit unexpectedly. This disrupts related services and prevents the system from functioning normally, without requiring authentication or UUID parameters.
Published: 2025-03-20T10:09:20.436Z
Updated: 2025-03-20T18:56:16.931Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9362 |
vulnerable | 2026-06-08 07:00:27.194216 |
Directory Traversal in polyaxon/polyaxon
HIGH (7.5)
An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerability allows an attacker to retrieve directory information and file contents from the server without proper authorization, leading to sensitive information disclosure. The issue enables access to system directories such as `/etc`, potentially resulting in significant security risks.
Published: 2025-03-20T10:09:48.070Z
Updated: 2025-03-20T18:34:35.259Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.