Approved changes feed: RSS · Atom

cpe:2.3:a:gss:iota_c.ai:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGss (1471f81f-c4dd-5fa4-8486-297b7765b257)
ProductIota C.Ai (84613995-120a-5b87-b158-e953609f62c2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52959 vulnerable 2026-06-08 06:54:11.802438 iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection')
A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file.
Published: 2024-11-27T05:23:11.281Z
Updated: 2024-11-27T14:44:37.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52958 vulnerable 2026-06-08 06:54:11.801418 iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature
A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function.
Published: 2024-11-27T05:22:47.950Z
Updated: 2024-11-27T14:46:28.815Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.