4 matches found
CVE-2020-14942
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py...
9.8CVSS6.9AI score0.0135EPSS
SaveExploits0
Deserialization of untrusted data
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py...
7.5CVSS9.4AI score0.0135EPSS
SaveExploits0References1Affected Software1
PYSEC-2020-112
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py...
9.8CVSS3.2AI score0.0135EPSS
SaveExploits0References2
CVE-2020-14942
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. Recent assessments: kevthehermit at June 21, 2020 7:03pm UTC reported: Outline Untrusted data from the client side is used to create a python pickled object. This can lead to full RCE and compromise of the host...
9.8CVSS1.6AI score0.0135EPSS
SaveExploits0References2
20