CVE-2024-47172

Summary

CVE-2024-47172 affects Computer Vision Annotation Tool (CVAT), an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can retrieve sensitive information about projects, tasks, jobs, and membership resources on a vulnerable CVAT instance. The information disclosed is equivalent to data obtained through a GET request to the resource. Moreover, an attacker can manipulate the default source and target storage for any project or task. To mitigate this vulnerability, it is recommended to upgrade to CVAT version 2.19.1 or any subsequent release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.