PaddlePaddle

Records35All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

PaddlePaddle records in CISA KEV

No PaddlePaddle vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Anakin · all components

TI-2022-13448 CVE-2022-31523 · GHSA-4qjq-8mg6-84cv

MEDIUM 43

The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01337 Published 2022-07-11 No fix listed CWE-22