Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Rpc.py Project Subscribe
Filtered by product Rpc.py
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-35411 1 Rpc.py Project 1 Rpc.py 2022-11-04 7.5 HIGH 9.8 CRITICAL
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle.