PRODUCT PROFILE

mindsdb

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2026-274832026/06/25

MindsDB - Remote Code Execution

MindsDB < 25.9.1.1 contains a remote code execution caused by path traversal in the /api/files upload file module, letting authenticated attackers write arbitrary files and execute commands, exploit requires authentication.

mindsdbPoC 已收录

CVSS—

严重CVE-2024-247592024/09/05

MindsDB -DNS Rebinding SSRF Protection Bypass

Detects DNS rebinding vulnerability that allows bypass of SSRF protection. The vulnerability exists in the URL validation mechanism where DNS resolution is performed without considering DNS rebinding attacks.

mindsdbPoC 已收录

CVSS9.1EPSS 44.2%