jsonpickle unsafe deserialization

jsonpickle through 1.4.2 allows remote code execution during deserialization of a malicious payload through the decode function. This CVE is disputed by the project author as intended functionality...

GHSA-J66Q-QMRC-89RX jsonpickle unsafe deserialization

jsonpickle through 1.4.2 allows remote code execution during deserialization of a malicious payload through the decode function. This CVE is disputed by the project author as intended functionality...

jsonpickle 2.0.0 Python library - Remote Code Execution Exploit

Exploit Title: python jsonpickle 2.0.0 - Remote Code Execution Vendor Homepage: https://jsonpickle.github.io Exploit Author: Adi Malyanker, Shay Reuven Software Link: https://github.com/jsonpickle/jsonpickle Version: 2.0.0 Tested on: windows, linux Python is an open source language. jsonickle...

python jsonpickle 2.0.0 - Remote Code Execution

Exploit Title: python jsonpickle 2.0.0 - Remote Code Execution Date: 24-2-2021 Vendor Homepage: https://jsonpickle.github.io Exploit Author: Adi Malyanker, Shay Reuven Software Link: https://github.com/jsonpickle/jsonpickle Version: 2.0.0 Tested on: windows, linux Python is an open source languag...

Python jsonpickle 2.0.0 Remote Code Execution

Exploit Title: python jsonpickle 2.0.0 - Remote Code Execution Date: 24-2-2021 Vendor Homepage: https://jsonpickle.github.io Exploit Author: Adi Malyanker, Shay Reuven Software Link: https://github.com/jsonpickle/jsonpickle Version: 2.0.0 Tested on: windows, linux Python is an open source languag...

Jsonpickle Code Issue Vulnerability

Jsonpickle is Jsonpickle personal developer of a Python based on Python used to support Python objects and Json for serialization software . A code issue vulnerability exists in jsonpickle version 1.4.1 and prior versions that allows remote code execution during deserialization of a malicious loa...

CVE-2020-22083

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...

CVE-2020-22083

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...

DEBIAN-CVE-2020-22083

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...

PYSEC-2020-49

DISPUTED jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must no...

PYSEC-2020-49

DISPUTED jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must no...

CVE-2020-22083

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...

UBUNTU-CVE-2020-22083

DISPUTED jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must no...

absarsnew (=1.1.0), airiam (>=0.1.2 <=0.1.8) +156 more potentially affected by CVE-2020-22083 via jsonpickle (>=0.7.1 <=1.4.1)

jsonpickle PYPI version =0.7.1, =0.1.2, =4.0.0, =1.1.4, =2.4.0, =1.0.0, =1.0.2 - apimaticclicksendapi =1.0.0 - apimaticsendapi =1.0.0 - apimaticswaggerpetstore =1.0.0 and more Source cves: CVE-2020-22083 Source advisory: OSV:PYSEC-2020-49...

CVE-2020-22083

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...

CVE-2020-22083

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...

CVE-2020-22083

CVE-2020-22083 affects jsonpickle up to version 1.4.1. The vulnerability enables remote code execution during deserialization of a malicious payload via the decode() function. The description notes this behavior has been argued as expected/documented in pickle usage. Several connected sources cor...

PT-2020-15423 · Jsonpickle +1 · Jsonpickle +1

Name of the Vulnerable Software and Affected Versions: jsonpickle versions 1.4.1 and earlier Description: The issue allows remote code execution during deserialization of a malicious payload through the decode function. It has been argued that this is expected and clearly documented behavior, as...

Jsonpickle 代码问题漏洞

Jsonpickle is Jsonpickle personal developer of a Python based on Python used to support Python objects and Json for serialization software . A code issue vulnerability exists in jsonpickle version 1.4.1 and prior versions that allows remote code execution during deserialization of a malicious loa...