Lucene search

Pickle serialization vulnerable to Deserialization of Untrusted Data

🗓️ 13 Oct 2023 19:39:25Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Pickle serialization vulnerability in vantage6 algorithms. Switch to JSON serialization to mitigate ris

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2023-23930	11 Oct 202318:15	–	cve
Veracode	Deserialization Of Untrusted Data	13 Oct 202305:27	–	veracode
NVD	CVE-2023-23930	11 Oct 202318:15	–	nvd
Vulnrichment	CVE-2023-23930 vantage6's Pickle serialization is insecure	11 Oct 202317:39	–	vulnrichment
Prion	Default configuration	11 Oct 202318:15	–	prion
Cvelist	CVE-2023-23930 vantage6's Pickle serialization is insecure	11 Oct 202317:39	–	cvelist
Github Security Blog	Pickle serialization vulnerable to Deserialization of Untrusted Data	13 Oct 202319:25	–	github
OSV	CVE-2023-23930	11 Oct 202318:15	–	osv
OSV	PYSEC-2023-196	11 Oct 202318:15	–	osv

Source	Link
github	www.github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-23930
github	www.github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0
github	www.github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-196.yaml
github	www.github.com/vantage6/vantage6
github	www.github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst
medium	www.medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Oct 2023 19:25Current

6.9Medium risk

Vulners AI Score6.9

CVSS35.5 - 7.2

EPSS0.01097

SSVC