Keras Arbitrary File Write Vulnerability in get_file Function
Vulnerability
A vulnerability in Keras version 3.7.0 allows attackers to write arbitrary files to the user's machine. This is achieved by downloading a crafted tar file through the get_file function.
Impact
Exploitation of this vulnerability could lead to unauthorized file creation on the user's machine, potentially overwriting existing files or disrupting system operations.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.0exploitability
8.1remediation
0.0relevance
0.0threat
3.2urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.