Command Injection

PaddlePaddle is vulnerable to command injection. The vulnerability is due to improper input handling in the convertshapecompare component, which allows an attacker to execute arbitrary operating system commands through crafted input exploitation...

GHSA-3CR5-2446-8PG3 PaddlePaddle command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

PaddlePaddle command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

Command injection

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314 Command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

CVE-2023-52314

CVE-2023-52314 affects PaddlePaddle prior to 2.6.0, where a command injection in convert_shape_compare allows execution of arbitrary OS commands. The issue is described consistently across multiple sources (OSV, GHSA, NVD, CVE lists) as a critical, network-accessible vulnerability with high impac...