{"data":{"id":"e49ac6a3-cf6d-4afc-b0f2-926e29fb291e","title":"CVE-2024-42474: Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a…","summary":"Snowflake's Streamlit open source framework had a path traversal flaw in its static file sharing feature, affecting hosted Streamlit apps on Windows when that feature is enabled. An attacker could exploit it to leak the password hash of the Windows user running Streamlit. The flaw only affects Windows.","solution":"Patched on Jul 25, 2024, in Streamlit open source version 1.37.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-42474","publishedAt":"2024-08-12T21:15:17.513Z","cveId":"CVE-2024-42474","cweIds":["CWE-22","CWE-22"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["streamlit@< 1.37.0 (fixed: 1.37.0)"],"affectedPackageNames":["streamlit"],"affectedPackageRefs":["pypi:streamlit"],"affectedVendors":[],"affectedVendorsRaw":["Streamlit","Snowflake Streamlit"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Streamlit path traversal through static file sharing on Windows","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00568,"epssCheckedAt":"2026-11-04T18:09:14.608Z","kevDateAdded":null,"advisoryAliases":["GHSA-rxff-vr5r-8cj5"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:55:23.846Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-07-25T18:21:39.629Z","daysToFix":-18,"fixCheckedAt":"2026-10-29T21:45:36.646Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"streamlit","fixedVersion":"1.37.0","matchedVersion":"1.37.0","fixReleasedAt":"2024-07-25T18:21:39.629Z","daysToFix":-18,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:45:36.496Z"}]}}