Command Injection in Helix Sync
CVE-2024-0325

3.6LOW

Key Information:

Vendor: Helix
Status: Sync
Vendor: CVE Published:; 1 February 2024

🔔 Create Helix Vulnerability Alert

What is CVE-2024-0325?

In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.

Affected Version(s)

Sync 0.0.0 < 2024.1

References

https://perforce.com

CVSS V3.1

Score:

3.6

Severity:

LOW

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 1, 2024
Vulnerability Reserved
Jan 8, 2024

.