GHSA-3CR5-2446-8PG3 PaddlePaddle command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

PaddlePaddle command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

Command injection

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314

CVE-2023-52314 affects PaddlePaddle prior to 2.6.0, where a command injection in convert_shape_compare allows execution of arbitrary OS commands. The issue is described consistently across multiple sources (OSV, GHSA, NVD, CVE lists) as a critical, network-accessible vulnerability with high impac...

CVE-2023-52314 Command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...