CVE-2024-9365CWE-352

Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon

Medium · published March 20, 2025

CVSS v3.0
6.5
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability includes potential data loss and service disruption.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-03-20T10:10Z
EPSS history
Timeline
  • 20 MAR 10:10Z
    Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon
    cvelistv5