Gss: >> Iota C.ai Security Vulnerabilities
A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.
CVSS Score
9.3
EPSS Score
0.004
Published
2024-11-27
A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function.
CVSS Score
9.3
EPSS Score
0.002
Published
2024-11-27