CVE-2023-38673

Publication date

2023-07-26 11:10:34

Family

Baidu

State

PUBLISHED

Description

PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system.