← Database

CVE-2024-39272

CRITICAL CVSS: 9.0 Published: 2025-02-06 Modified: 2026-06-17

Description

A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to an arbitrary html code. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected Platforms

Clear Clearml Enterprise Server

Weakness Type

CWE-79

References