PrivacyHigh
CVE-2024-40442: An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Docc…
- Occurred
- Sep 23, 2024
- Published
- Sep 23, 2024
- Source
- NVD CVE
Summary
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request.
Tags
- CVE
- CVE-2024-40442
- cvss:HIGH
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: CVE describes privilege escalation via crafted REST request in ML annotation tool, indicating security vulnerability with potential unauthorized access.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8