RSS   Vulnerabilities for 'Conference-scheduler-cli'   RSS

2018-08-28
 
CVE-2018-14572

CWE-78
 

 
In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

 


Copyright 2024, cxsecurity.com

 

Back to Top