CVE-2022-0845 HIGH

CVE-2022-0845: Code Injection in pytorchlightning/pytorch-lightning

Vendor Pytorchlightning
Product pytorchlightning/pytorch-lightning
Weakness CWE-94 · Code injection
Published March 5, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.

Key dates

02Disclosure timeline

March 5, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-33881 Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor CVE-2023-6996 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection CVE-2025-1465 lmxcms Maintenance db.inc.php code injection CVE-2023-0022 Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP) CVE-2020-5739