CVE-2024-0817 - Vulnerability Details

Vendors	Products
Paddlepaddle	Paddlepaddle

Link	Providers
https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:paddlepaddle:paddlepaddle::::::::
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
First Time appeared		Paddlepaddle Paddlepaddle paddlepaddle
CPEs		cpe:2.3:a:paddlepaddle:paddlepaddle:2.6.0:::::::*
Vendors & Products		Paddlepaddle Paddlepaddle paddlepaddle
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-0817", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "state": "PUBLISHED", "assignerShortName": "@huntr_ai", "dateReserved": "2024-01-23T02:44:04.061Z", "datePublished": "2024-03-07T01:15:20.283Z", "dateUpdated": "2025-04-16T15:52:53.157Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-03-07T01:25:50.673Z"}, "descriptions": [{"lang": "en", "value": "Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0"}], "affected": [{"vendor": "paddlepaddle", "product": "paddlepaddle/paddle", "versions": [{"version": "unspecified", "status": "affected", "versionType": "custom", "lessThanOrEqual": "latest"}]}], "references": [{"url": "https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3"}], "metrics": [{"cvssV3_0": {"version": "3.0", "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.3, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-77  Improper Neutralization of Special Elements used in a Command ('Command Injection')", "cweId": "CWE-77"}]}], "source": {"advisory": "44d5cbd9-a046-417b-a8d4-bea6fda9cbe3", "discovery": "EXTERNAL"}}, "adp": [{"affected": [{"vendor": "paddlepaddle", "product": "paddlepaddle", "cpes": ["cpe:2.3:a:paddlepaddle:paddlepaddle:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-07T16:42:05.851238Z", "id": "CVE-2024-0817", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T15:52:53.157Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:18:18.803Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-0817 (string)

assignerOrgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

state : PUBLISHED (string)

assignerShortName : @huntr_ai (string)

dateReserved : 2024-01-23T02:44:04.061Z (string)

datePublished : 2024-03-07T01:15:20.283Z (string)

dateUpdated : 2025-04-16T15:52:53.157Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

shortName : @huntr_ai (string)

dateUpdated : 2024-03-07T01:25:50.673Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 (string)

}

]

affected : [ »

0 : { »

vendor : paddlepaddle (string)

product : paddlepaddle/paddle (string)

versions : [ »

0 : { »

version : unspecified (string)

status : affected (string)

versionType : custom (string)

lessThanOrEqual : latest (string)

}

]

}

]

references : [ »

0 : { »

url : https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

version : 3.0 (string)

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H (string)

baseScore : 9.3 (number)

baseSeverity : CRITICAL (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

cweId : CWE-77 (string)

}

]

}

]

source : { »

advisory : 44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : paddlepaddle (string)

product : paddlepaddle (string)

cpes : [ »

0 : cpe:2.3:a:paddlepaddle:paddlepaddle:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : * (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-03-07T16:42:05.851238Z (string)

id : CVE-2024-0817 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-16T15:52:53.157Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T18:18:18.803Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:18:18.803Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0817", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-03-07T16:42:05.851238Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:paddlepaddle:paddlepaddle:*:*:*:*:*:*:*:*"], "vendor": "paddlepaddle", "product": "paddlepaddle", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-24T13:59:08.530Z"}}], "cna": {"source": {"advisory": "44d5cbd9-a046-417b-a8d4-bea6fda9cbe3", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.3, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "paddlepaddle", "product": "paddlepaddle/paddle", "versions": [{"status": "affected", "version": "unspecified", "versionType": "custom", "lessThanOrEqual": "latest"}]}], "references": [{"url": "https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3"}], "descriptions": [{"lang": "en", "value": "Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77  Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-03-07T01:25:50.673Z"}}}, "cveMetadata": {"cveId": "CVE-2024-0817", "state": "PUBLISHED", "dateUpdated": "2025-04-16T15:52:53.157Z", "dateReserved": "2024-01-23T02:44:04.061Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2024-03-07T01:15:20.283Z", "assignerShortName": "@huntr_ai"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T18:18:18.803Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-0817 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-03-07T16:42:05.851238Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:paddlepaddle:paddlepaddle:*:*:*:*:*:*:*:* (string)

]

vendor : paddlepaddle (string)

product : paddlepaddle (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : * (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-24T13:59:08.530Z (string)

}

]

cna : { »

source : { »

advisory : 44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

cvssV3_0 : { »

scope : CHANGED (string)

version : 3.0 (string)

baseScore : 9.3 (number)

attackVector : LOCAL (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

vendor : paddlepaddle (string)

product : paddlepaddle/paddle (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

versionType : custom (string)

lessThanOrEqual : latest (string)

}

]

}

]

references : [ »

0 : { »

url : https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-77 (string)

description : CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

shortName : @huntr_ai (string)

dateUpdated : 2024-03-07T01:25:50.673Z (string)

}

cveMetadata : { »

cveId : CVE-2024-0817 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-16T15:52:53.157Z (string)

dateReserved : 2024-01-23T02:44:04.061Z (string)

assignerOrgId : c09c270a-b464-47c1-9133-acb35b22c19a (string)

datePublished : 2024-03-07T01:15:20.283Z (string)

assignerShortName : @huntr_ai (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:paddlepaddle:paddlepaddle:2.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "F71F54C3-4868-476D-B0D8-D5E0FEE9FE63", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0"}, {"lang": "es", "value": "Inyecci\u00f3n de comando en IrGraph.draw en paddlepaddle/paddle 2.6.0"}], "id": "CVE-2024-0817", "lastModified": "2025-01-19T02:26:02.377", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.5, "impactScore": 6.0, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-03-07T02:15:51.660", "references": [{"source": "security@huntr.dev", "tags": ["Exploit", "Third Party Advisory"], "url": "https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "security@huntr.dev", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:paddlepaddle:paddlepaddle:2.6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F71F54C3-4868-476D-B0D8-D5E0FEE9FE63 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 (string)

}

1 : { »

lang : es (string)

value : Inyección de comando en IrGraph.draw en paddlepaddle/paddle 2.6.0 (string)

}

]

id : CVE-2024-0817 (string)

lastModified : 2025-01-19T02:26:02.377 (string)

metrics : { »

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 9.3 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 6 (number)

source : security@huntr.dev (string)

type : Secondary (string)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-03-07T02:15:51.660 (string)

references : [ »

0 : { »

source : security@huntr.dev (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3 (string)

}

]

sourceIdentifier : security@huntr.dev (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : security@huntr.dev (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation poc

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation poc

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object