PT-2020-15423 · Jsonpickle +1 · Jsonpickle +1

Name of the Vulnerable Software and Affected Versions: jsonpickle versions 1.4.1 and earlier Description: The issue allows remote code execution during deserialization of a malicious payload through the decode function. It has been argued that this is expected and clearly documented behavior, as...

Jsonpickle 代码问题漏洞

Jsonpickle is Jsonpickle personal developer of a Python based on Python used to support Python objects and Json for serialization software . A code issue vulnerability exists in jsonpickle version 1.4.1 and prior versions that allows remote code execution during deserialization of a malicious loa...

CVE-2020-22083: Deserialization of Untrusted Data

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used...