2 matches found
Insecure Deserialization (pickle) in pdfminer.six CMap Loader β Local Privesc
π Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...