Lucene search
PRIOn knowledge basePRION:CVE-2021-35196HistoryJun 21, 2021 - 11:15 p.m.
Deserialization of untrusted data
2021-06-2123:15:00
PRIOn knowledge base
www.prio-n.com
2
0.002 Low
EPSS
Percentile
56.0%
DISPUTED Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure deserialization via the pickle.load() function in settings.py. NOTE: the vendor’s position is that the product is not intended for opening an untrusted project file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| manuskript | le | 0.12.0 |
Related
debiancve
debiancve
CVE-2021-35196
2021-06-21 23:15:10
cve
cve
CVE-2021-35196
2021-06-21 23:15:10
ubuntucve
ubuntucve
CVE-2021-35196
2021-06-21 00:00:00
cvelist
cvelist
CVE-2021-35196
2021-06-21 22:21:39
nvd
nvd
CVE-2021-35196
2021-06-21 23:15:10