PrivacyHigh
CVE-2024-40441: An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Docc…
- Occurred
- Sep 23, 2024
- Published
- Sep 23, 2024
- Source
- NVD CVE
Summary
An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter.
Tags
- CVE
- CVE-2024-40441
- cvss:MEDIUM
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: CVE describes privilege escalation vulnerability in ML annotation tool allowing unauthorized access.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8