| |
Vulnerability CVE-2024-9953
Published: 2024-10-14 Modified: 2024-10-15
| Description: |
A Potential DOS Vulnerability exists in CERT VINCE software prior to version 3.0.8. An authenticated administrative user can inject an arbitrary pickle object as part of a user's profile. This can lead to a potential DoS on the server when the user's profile is accessed. Django server does restrict unpickling from crashing the server. |
References: |
https://github.com/CERTCC/VINCE/issues?q=label%3Asecurity
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
