Описание
A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.0.0 (включая) до 2.1.3 (включая)
cpe:2.3:a:gss:iota_c.ai:*:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00551
Низкий
7.2 High
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 7.2
github
больше 1 года назад
A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.
EPSS
Процентиль: 43%
0.00551
Низкий
7.2 High
CVSS3
Дефекты
CWE-94