Smartrobot · Smartrobot'S Conversational Ai Platform · CVE-2024-12652
**Name of the Vulnerable Software and Affected Versions**
SmartRobot's Conversational AI Platform versions prior to 7.2.0
**Description**
A Code Injection vulnerability exists in the groovy script function of SmartRobot's Conversational AI Platform, allowing remote authenticated users to perform arbitrary system commands via Groovy code. This enables remote users to execute system commands.
**Recommendations**
For versions prior to 7.2.0, update to version 7.2.0 to patch this issue. As a temporary workaround, consider restricting access to the groovy script function until the update is applied.