Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-8020

Denial of Service in lightning-ai/pytorch-lightning

Description

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

lightning-ai lightning-ai/pytorch-lightning

  • unspecified to ≤ latestaffected

References