# CVE-2024-3575: MindsDB stored XSS via CSV file upload

Source: https://junglewise.ai/threats/cve-2024-3575-mindsdb-stored-xss-via-csv-file-upload  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-04-16. Updated: 2026-06-06  
License: CC BY 4.0 with a link back

CVE-2024-3575 · Severity: medium · CVSS 5.8 · Published 2024-04-16

MindsDB, an open-source platform for building AI models from data, is vulnerable to a security flaw where malicious code can be hidden inside uploaded CSV files. If a user views one of these files, the hidden code can execute in their browser, potentially allowing an attacker to steal session information or perform actions on the user's behalf. This affects both the cloud-hosted and self-hosted versions of the software.

Technologies: [mindsdb (PyPI)](https://junglewise.ai/threats/technologies/mindsdb). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2024-3575 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-3575 being exploited in the wild.

**How severe is CVE-2024-3575?** Medium severity, with a CVSS score of 5.8, published 16 April 2024.

**Which products and versions are affected?** mindsdb (PyPI) <= 23.6.3.1, ECOSYSTEM:introduced=0,last_affected=23.6.3.1.

**Is there a fix for CVE-2024-3575?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-3575 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2024-3575?** Check whether you run mindsdb (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stored Cross-Site Scripting (XSS) vulnerability exists in MindsDB due to improper neutralization of input during the processing of CSV file uploads. An attacker can upload a CSV file containing a malicious JavaScript payload; when this file is subsequently viewed within the MindsDB interface (cloud or OSS), the payload executes in the context of the victim's browser. The vulnerability is tracked as CWE-79 and affects versions up to and including 23.6.3.1. While the CVSS vector indicates no user interaction, XSS typically requires a victim to view the malicious content. No official patch version was specified in the advisory.

## Affected products

- MindsDB mindsdb <= 23.6.3.1

## Identifiers

- CVE-2024-3575
- GHSA-93c5-rj2p-w52x
- PYSEC-2024-288

## Timeline

- 2024-04-16: disclosed: NVD publication date
- 2024-04-16: advisory: GitHub Advisory published

## References

- [https://huntr.com/bounties/5f720b48-ddeb-4f2a-830f-a3dd15d5daa2](https://huntr.com/bounties/5f720b48-ddeb-4f2a-830f-a3dd15d5daa2)
- [https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-288.yaml](https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-288.yaml)

## Related threats

- [PYSEC-2026-2648 - MindsDB has an Improper Access Control Issue](https://junglewise.ai/threats/cve-2026-7711-mindsdb-has-an-improper-access-control-issue)
- [PYSEC-2026-1628 - MindsDB Cross-site Scripting vulnerability](https://junglewise.ai/threats/cve-2024-45856-mindsdb-cross-site-scripting-in-web-ui)
- [PYSEC-2026-1629 - MindsDB Eval Injection vulnerability](https://junglewise.ai/threats/cve-2024-45847-mindsdb-eval-injection-vulnerability)
- [MindsDB path traversal in /api/files leading to RCE](https://junglewise.ai/threats/cve-2026-27483-mindsdb-path-traversal-in-api-files-leading-to-rce)
- [MindsDB SSRF via URL validation bypass in File Upload](https://junglewise.ai/threats/cve-2026-2531-mindsdb-ssrf-via-url-validation-bypass-in-file-upload)