CVE-2024-45856: Mindsdb

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI.

Affected products

• Mindsdb Mindsdb: any version

Published 2024-09-12. Last modified 2026-06-17.