CVE-2024-52959: iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection')
9.3
CVSS
Description
A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.
Classification
CVE ID: CVE-2024-52959
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.3
Affected Products
Vendor: Galaxy Software Services Corporation
Product: iota C.ai Conversational Platform
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)