Security Advisory

CVE-2024-12652

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-26 04:05:16
Last updated 2024-12-26 17:39:54
Assigner ZUSO ART
State PUBLISHED

Description

A Improper Control of Generation of Code (Code Injection) vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code.