CVE-2024-5187

A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability enables attackers to overwrite any file on the system, potentially leading to remote code execution, deletion of system, personal, or application files, thus impacting the integrity and availability of the system. The issue arises from the function's handling of tar file extraction without performing security checks on the paths within the tar file, as demonstrated by the ability to overwrite the `/home/kali/.ssh/authorized_keys` file by specifying an absolute path in the malicious tar file.

• CWE-22

• https://huntr.com/bounties/50235ebd-3410-4ada-b064-1a648e11237eExploit, Issue Tracking, Third Party Advisory
• https://huntr.com/bounties/50235ebd-3410-4ada-b064-1a648e11237eExploit, Issue Tracking, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-51864Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51865Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51866Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51867Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51868Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51869Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51870Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51871Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51872Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51873Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51874Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-51875Improper Neutralization of Input During Web Page Generation …5.4