CVE-2024-0818: PaddlePaddle Path Traversal vulnerability

March 7, 2024 (updated January 23, 2025)

Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6

References

github.com/PaddlePaddle/Paddle
github.com/PaddlePaddle/Paddle/commit/5c50d1a8b97b310cbc36560ec36d8377d6f29d7c
github.com/advisories/GHSA-2rp8-hff9-c5wr
huntr.com/bounties/85b06a1b-ac0b-4096-a06d-330891570cd9
nvd.nist.gov/vuln/detail/CVE-2024-0818

Code Behaviors & Features

Detect and mitigate CVE-2024-0818 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →