CVE-2023-38699

Summary

CVE-2023-38699: MindsDB's AI Virtual Database, before version 23.7.4.0, contained a vulnerability that allowed developers to bypass SSL certificate checks when making requests with `verify=False`. This issue potentially exposed data to interception or man-in-the-middle attacks. From version 23.7.4.0 onwards, certificate validation is enforced by default, mitigating this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.