Description
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tendenci | < 12.0.11 | 12.0.11 | GHSA-jqmc-fxxp-r589 |
Critical · 9.8
CVE-2020-14942
EUVD-2020-0184GHSA-jqmc-fxxp-r589PYSEC-2020-112
Deserialization of Untrusted Data in Tendenci
Published Jun 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre