Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/17 5:3 a.m.29 views

GHSA-M923-W2GJ-V43G graphite-web is vulnerable to Remote Code Execution via renderLocalView function

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

9.5CVSS7.1AI score0.38668EPSS
SaveExploits5References9
Rows per page
Query Builder