CVE-2024-10073 – flairNLP flair Mode File Loader clustering.py ClusteringModel code injection

https://notcve.org/view.php?id=CVE-2024-10073

17 Oct 2024 — A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. • https://vuldb.com/?id.280722 • CWE-94: Improper Control of Generation of Code ('Code Injection') •