Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350 | Exploit Third Party Advisory |
| https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350 | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2024-03-07 04:15
Updated : 2025-01-19 02:23
NVD link : CVE-2024-0815
Mitre link : CVE-2024-0815
CVE.ORG link : CVE-2024-0815
JSON object : View
Products Affected
paddlepaddle
- paddlepaddle
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
