CyberSecBulletin

Rpc.py Project vulnerabilities

We track 1 vulnerability in Rpc.py Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Rpc.py Project vulnerabilities

  • 9.8 Critical severity

    Rpc.py: Insufficiently Protected Credentials

    CVE-2022-35411Rpc.py ProjectEPSS 46.6%

    rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed