Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PaddlePaddle 代码注入漏洞
Vulnerability Description
PaddlePaddle（飞桨）是中国飞桨（PaddlePaddle）开源的一个独立的研发深度学习平台。 PaddlePaddle 2.4存在安全漏洞，该漏洞源于其paddle.audio.functional.get_window组件在用户提供的winstr上调用eval允许攻击者实现命令注入导致任意代码执行。
CVSS Information
N/A
Vulnerability Type
N/A