CVE-2024-0917

2024-03-0709:15:38

CWE-94

@huntr_ai

web.nvd.nist.gov

cve

2024

0917

remote code execution

paddlepaddle

paddle

nvd

CVSS3

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

AI Score

9.6

Confidence

High

EPSS

Percentile

9.0%

JSON

remote code execution in paddlepaddle/paddle 2.6.0

Affected configurations

Vulnrichment

Node

paddlepaddlepaddleMatch2.6.0

VendorProductVersionCPE
paddlepaddlepaddle2.6.0cpe:2.3:a:paddlepaddle:paddle:2.6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
paddlepaddle	paddle	2.6.0	cpe:2.3:a:paddlepaddle:paddle:2.6.0:::::::*

CNA Affected

[
  {
    "vendor": "paddlepaddle",
    "product": "paddlepaddle/paddle",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]