Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2024-0815

Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

VectorLOCAL

PublishedMar 07, 2024, 04:15

Published Bysecurity@huntr.dev

Base Score

Score8.8

Package (Ecosystem)IntroducedFixedLimit

paddlepaddle(PyPI)0N/AN/A

CWE-78

Base Score

8.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL