Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-51480

Опубликовано: 22 июл. 2025
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:linuxfoundation:onnx:1.17.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.0013
Низкий

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
ubuntu
7 месяцев назад

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

msrc
5 месяцев назад

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

CVSS3: 8.8
github
7 месяцев назад

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

EPSS

Процентиль: 33%
0.0013
Низкий

8.8 High

CVSS3

Дефекты

CWE-22