Path traversal vulnerability in Intel Extension for Transformers CVE-2024-21799
A path traversal vulnerability in Intel Extension for Transformers software versions before 1.5 could allow authenticated users with local access to escalate privileges. Intel released version 1.5 on 11 November 2024 to address the issue.
What happened
A path traversal vulnerability in Intel Extension for Transformers software before version 1.5 allows authenticated users with local access to potentially escalate privileges.
Index analysis
The vulnerability received a CVSS 3.1 base score of 7.1 (High) and a CVSS 4.0 base score of 6.9 (Medium), indicating potential for integrity and availability impacts.
Governance controls
Intel released version 1.5 of the software to mitigate the vulnerability and recommends users update to this version or later.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.