Remote Code Injection Vulnerability Affects Iota Conversational Platform
CVE-2024-52959

Currently unrated

Key Information:

Vendor: Galaxy Software Services Corporation
Status: Iota C.ai Conversational Platform
Vendor: CVE Published:; 27 November 2024

🔔 Create Galaxy Software Services Corporation Vulnerability Alert

What is CVE-2024-52959?

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iota C.ai Conversational Platform 1.0.0 <= 2.1.3

References

https://zuso.ai/advisory/za-2024-12

third-party-advisory

Timeline

Vulnerability published
Nov 27, 2024
Vulnerability Reserved
Nov 18, 2024

JSON

Galaxy Software Services Corporation

What is CVE-2024-52959?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.