Description
picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib.request.urlopen. Attackers can bypass RCE-focused blocklists to exfiltrate sensitive data like /etc/passwd to external servers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| picklescan | picklescan | < 0.0.35 | 0.0.35 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.35 | 0.0.35 | GHSA-9726-w42j-3qjr |
References
- GitHub Security Advisory (GHSA-9726-w42j-3qjr) vendor-advisory
- VulnCheck Advisory: picklescan - Arbitrary File Read via Unsafe Pickle Deserialization third-party-advisory