CRITICAL 9.3 PyPI
Code Injection in paddlepaddle
GHSA-chj7-w3f6-cvfj · CVE-2024-0521
Published · Modified
Description
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.
Ready to move
Start Securing
Free, no credit card | First findings in minutes