Today > | 16 High | 14 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-52959

Nov. 27, 2024, 6:15 a.m.

Tags

CWE-94
ART@zuso.ai
2024-11-27
CVE-2024-52959

Product(s) Impacted

iota C.ai Conversational Platform

  • 1.0.0 through 2.1.3

Description

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.

Weaknesses

CWE-94
Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CWE ID: 94

Date

Published: Nov. 27, 2024, 6:15 a.m.

Last Modified: Nov. 27, 2024, 6:15 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

ART@zuso.ai

References

https://zuso.ai/ ART@zuso.ai