CVEvulnerability

CVE-2024-55459

6.5 MEDIUM Published 2025-01-08 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2025-01-08
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses: CWE-494

Description

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.

Affected configurations

• keras keras 3.7.0

Weakness · CWE (1)

CWE-494 Download of Code Without Integrity Check weakness

References

https://github.com/keras-team/keras Product
https://keras.io Product
https://river-bicycle-f1e.notion.site/Arbitrary-File-Write-Vulnerability-in-get_file-function-11888e31952580179224e50892976d32 Broken Link

CVE-2024-55459

Description

Affected configurations

Related

Weakness · CWE (1)

References