26Oca
CVE-2024-0960 | flink-extended ai-flow 0.3.1 workflow_command.py cloudpickle.loads deserialization
A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the functioncloudpickle.loads
of the file \ai_flow\cli\commands\workflow_command.py. The manipulation leads to deserialization.
This vulnerability is known as CVE-2024-0960. The attack can be launched remotely. Furthermore, there is an exploit available.