What is CVE-2024-52958?

CVE-2024-52958 is a high-severity vulnerability in Galaxy Software Services Corporation Iota C.ai Conversational Platform, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.2/10. Published 2024-11-27.

How severe is CVE-2024-52958?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Galaxy Software Services Corporation Iota C.ai Conversational Platform

CVE-2024-52958

A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function.

EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Galaxy Software Services Corporation Iota C.ai Conversational Platform — versions 1.0.0
Gss Iota_c.ai

Weakness classification (CWE)

CWE-347 — Improper Verification of Cryptographic Signature

References

ART@zuso.ai (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-52958?: CVE-2024-52958 is a high-severity vulnerability in Galaxy Software Services Corporation Iota C.ai Conversational Platform, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.2/10. Published 2024-11-27.
How severe is CVE-2024-52958?: High severity. CVSS v3 base score is 7.2 out of 10.