Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36879
HistorySep 01, 2022 - 6:41 a.m.

Unsafe Deserialization

2022-09-0106:41:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

0.003 Low

EPSS

Percentile

70.2%

NVFLARE is vulnerable to unsafe deserialization. The use of unsafe Pickle function allows an unprivileged network attacker to cause Remote Code Execution.

CPENameOperatorVersion
nvflarele2.1.3
nvflarele2.1.3

0.003 Low

EPSS

Percentile

70.2%