CVE-2023-52310: Command injection in get_online_pass_interval
Published Jan 3, 2024
·Updated
PaddlePaddle before 2.6.0 has a command injection in getonlinepassinterval. This resulted in the ability to execute arbitrary commands on the operating system.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:14 AM
Data Sourced
08:14 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52310?
CVE-2023-52310 is a high severity vulnerability due to the potential for executing arbitrary commands on the operating system.
2
How do I fix CVE-2023-52310?
To fix CVE-2023-52310, upgrade PaddlePaddle to version 2.6.0 or later.
3
What does CVE-2023-52310 affect?
CVE-2023-52310 affects all versions of PaddlePaddle prior to 2.6.0.
4
What type of vulnerability is CVE-2023-52310?
CVE-2023-52310 is classified as a command injection vulnerability.
5
What products are impacted by CVE-2023-52310?
The impacted product is PaddlePaddle, especially versions before 2.6.0.