Arbitrary Code Execution

paddlepaddle is vulnerable to arbitrary code execution. The vulnerability exists in the getwindow function in window.py because it calls eval on user supplied winstr which allows an attacker to inject and execute malicious codes in to the system...