CVE-2021-4118

EUVD-2021-0212
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
@huntrdevCNA
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
lightningaipytorch_lightning
𝑥
< 1.6.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/pytorchlightning/pytorch-lightning/commit/62f1e82e032eb16565e676d39e0db0cac7e34ace
https://huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6
https://github.com/pytorchlightning/pytorch-lightning/commit/62f1e82e032eb16565e676d39e0db0cac7e34ace
https://huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6