CyberSecBulletin

Combust vulnerabilities

We track 1 vulnerability in Combust products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 15, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Combust vulnerabilities

  • 9.8 Critical severity

    Mleap: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2023-5245CombustEPSS 1.19%

    FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. When creating an instance of TensorflowModel using the saved_model format and an exported tensorf