AVID-2026-R1446

Description

Vulnerability CVE-2024-27318

Details

Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.

Reason for inclusion in AVID: CVE-2024-27318 describes a directory traversal vulnerability in ONNX up to v1.15.0 via the external_data field in tensor proto. ONNX is a core AI/ML ecosystem component used in model packaging, serving, and pipelines. This is a software vulnerability that impacts the software supply chain of AI systems (dependencies/frameworks), with potential data leakage. The report provides CVSS 3.1 details and references, indicating a security risk in AI software stacks.

References

Affected or Relevant Artifacts

Developer: onnx
Deployer: onnx
Artifact Details:

Type	Name
System	onnx

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score	7.5
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	🔴 High
Integrity Impact	NONE
Availability Impact	NONE

CWE

ID	Description
CWE-22	CWE-22 Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

Other information

Report Type: Advisory
Credits:
Date Reported: 2024-02-23
Version: 0.3.3
AVID Entry