CVE-2023-23930

CVE-2023-23930 affects vantage6, a federated learning infrastructure, in versions prior to 4.0.0 due to its default use of the insecure pickle serialization module. This vulnerability carries a CVSS score of 7.2 (HIGH), indicating that a highly privileged attacker can achieve complete compromise of confidentiality, integrity, and availability over the network with low attack complexity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.