iota C.ai Conversational Platform vulnerabilities

2 known vulnerabilities in iota C.ai Conversational Platform from Galaxy Software Services. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  iota C.ai Conversational Platform: Improper Control of Generation of Code

  CVE-2024-52959Nov 27, 2024Galaxy Software Services

  A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.

• 7.2 High severity

  iota C.ai Conversational Platform: Improper Verification of Cryptographic Signature

  CVE-2024-52958Nov 27, 2024Galaxy Software Services

  A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function.