VDB
BDU%3A2025-04881
BDU%3A2025-04881
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента serde.py библиотеки BentoML, позволяющая нарушителю выполнить произвольный код на сервере
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения | BentoML |
Timeline
- Apr 23, 2025 CVE Published
- May 28, 2025 CVE Updated
References
- https://github.com/bentoml/BentoML/releases/tag/v1.4.3 url
- https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc url
- https://github.com/bentoml/BentoML/commit/b35f4f4fcc53a8c3fe8ed9c18a013fe0a728e194 url
- https://github.com/rapid7/metasploit-framework/commit/7d70005884913bb5b1bcf66b3167546c06003f1d url