Vulnerability Details CVE-2024-12652
A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.9%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2024-12652
-
cpe:2.3:a:intumit:smartrobot:-
-
cpe:2.3:a:intumit:smartrobot:6.0.0-202012tw
-
cpe:2.3:a:intumit:smartrobot:6.2.0-202303tw
-
cpe:2.3:a:intumit:smartrobot:7.1.0