CVE-2023-52311
CVE-2023-52311 · Command injection in _wget_download
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.
CVSS 9.6 · Critical · EPSS 1.2% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
paddlepaddle
- Versions
- ≥ 0, < 2.6.0: Affected (git)
Update to 2.6.0
paddlepaddle PyPI
- Versions
- 1.8.5
- Affected ranges
- ECOSYSTEM: < 2.6.0
Update to 2.6.0
paddlepaddle PyPI
- Versions
- 1.8.5
- 2.3.0
- 2.3.1
- 2.3.2
- 2.4.0
- 2.4.0rc0
- 2.4.1
- 2.4.2
- 2.5.0
- 2.5.0rc0
- 2.5.0rc1
- 2.5.1
- 2.5.2
- Affected ranges
- ECOSYSTEM: < 2.6.0
Update to 2.6.0