Command injection in get_online_pass_interval
CVE-2023-52310

9.6CRITICAL

Key Information:

Vendor: Paddlepaddle
Status: Paddlepaddle
Vendor: CVE Published:; 3 January 2024

🔔 Create Paddlepaddle Vulnerability Alert

What is CVE-2023-52310?

A command injection vulnerability exists in PaddlePaddle prior to version 2.6.0 specifically within the get_online_pass_interval function. This vulnerability allows attackers to execute arbitrary commands on the operating system, posing significant security risks. Users and administrators of affected versions are encouraged to upgrade to the latest version to mitigate potential exploitation.

Affected Version(s)

PaddlePaddle 0 < 2.6.0

References

https://github.com/PaddlePaddle/Paddle/blob/develop/secur...

CVSS V3.1

Score:

9.6

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 3, 2024
Vulnerability Reserved
Jan 2, 2024

CVE-2023-52310 Data

JSON