HighVulnerability
CVE-2024-21799: Intel Extension for Transformers path traversal enabling privilege escalation
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2024-21799
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
CVE-2024-21799 is a path traversal flaw in Intel(R) Extension for Transformers software before version 1.5. An authenticated user with local access may be able to escalate privilege. Intel Corporation is the CNA, scoring it CVSS-B 6.9 (MEDIUM) with the vector CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.