Developer Tools & Libraries
Remote Code Execution
Remote Code Execution In JsonPickle Python Module
Remote Code Execution in jsonPickle python module jsonpickle <= 1.4.2 versions allows remote code execution during deserialization of a malicious payload through the decode() function.
.png)
Overview
Remote Code Execution in jsonPickle python module
jsonpickle <= 1.4.2 versions allows remote code execution during deserialization of a malicious payload through the decode() function.
Vulnerability details
Remote Code Execution in jsonPickle python module jsonpickle <= 1.4.2 versions allows remote code execution during deserialization of a malicious payload through the decode() function.
Disclosure timeline
2020-08-13 reported to the vendor
2020-12-17 CVE published
References
Credits
Manmeet Singh
Related Advisories
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability
Concerned about a similar issue in your product?
Payatu's researchers find these vulnerabilities before attackers do. Talk to us about product, firmware and IoT security testing.
