Описание
NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
EPSS
Процентиль: 21%
0.00068
Низкий
8.8 High
CVSS3
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 8.8
github
около 2 месяцев назад
NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
EPSS
Процентиль: 21%
0.00068
Низкий
8.8 High
CVSS3
Дефекты
CWE-502