CVE-2023-27531

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code...

CVE-2023-27531

The Kredis Ruby on Rails open-source data structure is vulnerable to a deserialization of untrusted data flaw in its JSON deserialization code. Specifically, the vulnerability exists within the cast_value function in the json.rb file, which allows an attacker to parse crafted JSON data. This coul...

CVE-2023-27531

creationtimestamp| type| source ---|---|--- 2023-08-16 15:18:00+00:00| seen| https://t.me/ctinow/130894 2025-01-09 00:56:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113795675424067393 2025-01-09 01:14:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/865 2025-01-09...

Internet Bug Bounty: [CVE-2023-27531] Possible Deserialization of Untrusted Data vulnerability in Kredis JSON

A deserialization vulnerability was discovered in the Kredis JSON deserialization code, allowing for the potential deserialization of untrusted data. This could result in unexpected objects being deserialized in the system. The vulnerability has been assigned the CVE identifier CVE-2023-27531...

GHSA-H2WM-P2VG-6PW4 Kredis JSON Possible Deserialization of Untrusted Data Vulnerability

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...

Kredis JSON Possible Deserialization of Untrusted Data Vulnerability

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...

Possible Deserialization of Untrusted Data Vulnerability in Kredis JSON

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...