CVE-2023-2800

ADVISORY - github

Summary

Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.

EPSS Score⁠: 0.00018 (0.030)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-377⁠

Insecure Temporary File

ADVISORY - github

CWE-377⁠

Insecure Temporary File

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-377⁠

Insecure Temporary File

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

10 months ago

ADVISORY IDCVE-2023-2800⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-377⁠

CVSS SCORE

4.7medium

GitHub

CREATED

2 years ago

UPDATED

10 months ago

ADVISORY IDGHSA-282v-666c-3fvg⁠

EXPLOITABILITY SCORE

1.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-377⁠

CVSS SCORE

4.7medium

PypA

CREATED

2 years ago

UPDATED

10 months ago

ADVISORY ID

PYSEC-2023-299

EXPLOITABILITY SCORE

1.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

4.7medium

GitLab

CREATED

2 years ago

UPDATED

10 months ago

ADVISORY ID

CVE-2023-2800

EXPLOITABILITY SCORE

1.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-377⁠CWE-937⁠

CVSS SCORE

4.7medium

intheWild

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY IDCVE-2023-2800⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY