Lucene search
GoogleOSV:PYSEC-2019-116HistoryOct 05, 2019 - 11:15 p.m.
PYSEC-2019-116
2019-10-0523:15:00
Google
osv.dev
6
0.006 Low
EPSS
Percentile
77.7%
Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.0 allows attackers to execute arbitrary scripts.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rediswrapper | eq | 0.1.0 | |
| rediswrapper | eq | 0.2.0 | |
| rediswrapper | eq | 0.2.1 |
Related
veracode
veracode
Arbitrary Code Execution
2019-10-07 03:02:58
osv
osv
Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts
2019-11-20 01:37:13
CVE-2019-17206
2019-10-05 23:15:10
cvelist
cvelist
CVE-2019-17206
2019-10-05 22:01:24
cve
cve
CVE-2019-17206
2019-10-05 23:15:10
nvd
nvd
CVE-2019-17206
2019-10-05 23:15:10
github
github
prion
prion
Deserialization of untrusted data
2019-10-05 23:15:00