PT-2024-18164 · Paddlepaddle · Paddlepaddle/Paddle

Name of the Vulnerable Software and Affected Versions: paddlepaddle/paddle version 2.6.0 Description: The issue allows for arbitrary file read via the paddle.vision.ops.read file function. Recommendations: For paddlepaddle/paddle version 2.6.0, consider restricting access to the read file functio...