CVE-2024-52958 — iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature

CVE-2024-52958

iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature PUBLISHED

Description (CNA)

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function.

Affected (CNA)

Vendor / product	Versions
Galaxy Software Services Corporation / iota C.ai Conversational Platform	affected 1.0.0 through 2.1.3

CWE

CWE-347

References

https://zuso.ai/advisory/za-2024-11

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.