← All advisories

Medium severity6.1NVD Advisory· Published Apr 16, 2024· Updated Jun 17, 2026

CVE-2024-3575

CVE-2024-3575

Description

Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mindsdbPyPI	<= 23.6.3.1	—

Affected products

3

Mindsdb/Mindsdb2 versions
cpe:2.3:a:mindsdb:mindsdb:23.6.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mindsdb:mindsdb:23.6.3.1:*:*:*:*:*:*:*
- (no CPE)range: unspecified
ghsa-coords
pkg:pypi/mindsdb
Range: <= 23.6.3.1

Patches

Vulnerability mechanics

References

4

huntr.com/bounties/5f720b48-ddeb-4f2a-830f-a3dd15d5daa2nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-93c5-rj2p-w52xghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-3575ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-288.yamlghsaWEB

News mentions

0

No linked articles in our index yet.