Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5457
HistoryNov 20, 2017 - 1:16 a.m.

Unsafe Deserialization

2017-11-2001:16:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.002 Low

EPSS

Percentile

58.8%

redis-store is vulnerable to unsafe deserialization. The marshalling ability of redis-store allows attackers to load unsafe objects from redis. In order to be vulnerable to this, the options[:marshalling] needs to be used.

CPENameOperatorVersion
redis-storele1.3.0

0.002 Low

EPSS

Percentile

58.8%