Remote Code Execution Vulnerability in Python jsonpickle by Jsonpickle Team

⚠️ CVE-Referenzen: CVE-2021-47952
Jsonpickle - Python Jsonpickle - CRITICAL - CVE-2021-47952. The remote code execution vulnerability in version 2.0.0 of Python jsonpickle arises when the library deserializes malicious JSON payloads. Attackers can exploit this flaw by crafting JSON strings that contain py/repr directives, leading to the invocation of the eval function on the server. This allows for the execution of arbitrary Python commands, potentially compromising the integrity of the system running the affected version of jsonpickle. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io