Lucene search
K

10 matches found

RedHat Linux
RedHat Linux
added 2 days ago4 views

org.apache.camel/camel-infinispan: Apache Camel camel-infinispan: Arbitrary code execution via deserialization of untrusted data

A flaw was found in the camel-infinispan component of Apache Camel. A remote attacker, with the ability to write to the Infinispan cache, can inject a specially crafted serialized Java object. When this object is deserialized during normal aggregation repository operations, it can lead to arbitra...

8.8CVSS6.3AI score0.00271EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/02/11 9:30 p.m.25 views

DiskCache has unsafe pickle deserialization

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

9.8CVSS6.4AI score0.00041EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2026/02/11 7:15 p.m.1 views

DEBIAN-CVE-2025-69872

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

9.8CVSS8.6AI score0.00041EPSS
Exploits1References1
OSV
OSV
added 2026/02/11 7:15 p.m.2 views

CVE-2025-69872

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

9.8CVSS6.4AI score0.00041EPSS
Exploits1References2
OSV
OSV
added 2026/02/11 7:15 p.m.1 views

UBUNTU-CVE-2025-69872

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

9.8CVSS6.4AI score0.00041EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/11 12:0 a.m.1 views

CVE-2025-69872

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

6.4AI score0.00041EPSS
Exploits1References3
CVE
CVE
added 2026/02/11 12:0 a.m.14 views

CVE-2025-69872

CVE-2025-69872 affects DiskCache (python-diskcache) up to version 5.6.3, where Python pickle is used for serialization by default. An attacker with write access to the cache directory can cause arbitrary code execution when the victim application reads from the cache. The provided documents do no...

9.8CVSS6.4AI score0.00041EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2026/02/11 12:0 a.m.2 views

CVE-2025-69872

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

9.8CVSS7.6AI score0.00041EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2026/02/11 12:0 a.m.2 views

CVE-2025-69872

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

9.8CVSS8.6AI score0.00041EPSS
Exploits1
OSV
OSV
added 2018/10/18 1:29 p.m.1 views

DEBIAN-CVE-2018-12385

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally...

7CVSS8.6AI score0.0006EPSS
Exploits0References1
Rows per page
Query Builder