CVE-2024-0325CWE-94

Command Injection in Helix Sync

Low · published February 1, 2024

CVSS v3.1
3.6
EPSS
1%
Percentile
54.5
In the wild
Unconfirmed
What it is

In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00752 · 54.5th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-02-01T22:03Z
EPSS history
Timeline
  • 01 FEB 22:03Z
    Command Injection in Helix Sync
    cvelistv5