medium5.8
CVE-2024-3575
Cross-site Scripting (XSS) in mindsdb/mindsdb
Impact
When a user uploads a csv file that contains an javascript payload a Cross-site Scripting (XSS) is triggered when the file is viewed. This is true for both cloud version and OSS version.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | mindsdb | <= 23.6.3.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mindsdb | Mindsdb | Version 23.6.3.1 |