{"data":{"id":"6b77f4b8-51d0-4947-a598-8619fbfceaa2","title":"CVE-2024-6577: In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket…","summary":"CVE-2024-6577 affects the latest version of pytorch/serve. The script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without verifying that the bucket is owned or accessible by the project. If the bucket is unsecured or unclaimed by the appropriate entity, this could allow unauthorized access, data breaches, exposure of proprietary information, or unauthorized modification of stored data. The weakness is classified as CWE-840 (Business Logic Errors).","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-6577","publishedAt":"2025-03-20T14:15:32.987Z","cveId":"CVE-2024-6577","cweIds":["CWE-840"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["torchserve@<= 0.11.0"],"affectedPackageNames":["torchserve"],"affectedPackageRefs":["pypi:torchserve"],"affectedVendors":[],"affectedVendorsRaw":["pytorch/serve"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"pytorch/serve upload script references unclaimed S3 bucket","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00395,"epssCheckedAt":"2026-11-04T06:10:15.975Z","kevDateAdded":null,"advisoryAliases":["GHSA-xx7c-j7h3-vjcq"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:16.079Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}