CVE-2024-0817

CRITICAL 9.3EPSS 1.2%

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.0: 9.3 CRITICALCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 1.17% chance of exploitation in the next 30 days, 65th percentile
Published: 2024-03-07
Updated: 2025-04-16

Proof-of-concept exploits (1)

https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3

References

Related