cve/2019/CVE-2019-17206.md
2024-06-09 00:33:16 +00:00

691 B

CVE-2019-17206

Description

Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.0 allows attackers to execute arbitrary scripts.

POC

Reference

Github

No PoCs found on GitHub currently.