CVE-2023-38860 | Severity.io

Description

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

Related CPE's

Vulnerable

References

ExploitIssue Tracking

ExploitIssue Tracking

Weaknesses

Primary

CWE-94

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

Vulnerability status

Modified

Published

2023-08-15T15:15:11.737Z

2 years ago

Last modified

2024-11-21T07:14:18.683Z

1 year ago