Description
labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who supply a crafted data file or relational data archive can execute arbitrary code when a user loads it with these functions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NIST | labbench | < 0.46.1 | 0.46.1 |
References
- GitHub Pull Request #32 patch issue-tracking
- Patch Commit patch
- https://github.com/usnistgov/labbench/blob/0.46.0/src/labbench/_data.py#L1664-L1666 technical-description
- labbench ChangeLog release-notes
- https://pypi.org/project/labbench/0.46.1/ product
- https://github.com/usnistgov/labbench product
- VulnCheck Advisory: labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch third-party-advisory