CVE-2023-52311: Command injection in _wget_download
Published Jan 3, 2024
·Updated
PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:15 AM
Data Sourced
08:15 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52311?
CVE-2023-52311 is classified as a high severity vulnerability due to its potential for arbitrary command execution.
2
How do I fix CVE-2023-52311?
To fix CVE-2023-52311, update PaddlePaddle to version 2.6.0 or later.
3
What type of vulnerability is CVE-2023-52311?
CVE-2023-52311 is a command injection vulnerability affecting PaddlePaddle.
4
Which versions of PaddlePaddle are affected by CVE-2023-52311?
PaddlePaddle versions prior to 2.6.0 are affected by CVE-2023-52311.
5
Can CVE-2023-52311 affect my system security?
Yes, CVE-2023-52311 can compromise system security by allowing remote execution of arbitrary commands.