Количество 2
Количество 2
CVE-2022-45908
около 3 лет назад
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVSS3: 9.8
EPSS: Низкий
GHSA-83g7-8fch-p37m
около 3 лет назад
PaddlePaddle vulnerable to code injection via winstr
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-45908 In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution. | CVSS3: 9.8 | 1% Низкий | около 3 лет назад | |
GHSA-83g7-8fch-p37m PaddlePaddle vulnerable to code injection via winstr | CVSS3: 9.8 | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу
20