{"id":"CVE-2023-31143","aliases":["GHSA-c6mm-2g84-v4m7","PYSEC-2023-64"],"url":"https://o3.security/vulnerability/CVE-2023-31143","summary":"Mage terminal user authentication not working properly","details":"mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior to 0.8.72 with user authentication enabled may be affected by a vulnerability. The terminal could be accessed by users who are not signed in or do not have editor permissions. Version 0.8.72 contains a fix for this issue.","published":"2023-05-09T14:59:42.330Z","modified":"2026-07-15T01:49:13.226158047Z","cvss":{"score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"mage-ai","fixedVersion":"0.8.72"}],"fix":{"url":"https://github.com/mage-ai/mage-ai/commit/f63cd00f6a3be372397d37a4c9a49bfaf50d7650","label":"mage-ai/mage-ai@f63cd00"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31143.json"},{"type":"ADVISORY","url":"https://github.com/mage-ai/mage-ai/security/advisories/GHSA-c6mm-2g84-v4m7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31143"},{"type":"FIX","url":"https://github.com/mage-ai/mage-ai/commit/f63cd00f6a3be372397d37a4c9a49bfaf50d7650"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:13.226158047Z"}}