CVE-2025-46417 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.
Medium CVSS: 6.8

CVE-2025-46417

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.
Vendor
Mmaitre314
Product
Picklescan
CWE
CWE-184
Yayın Tarihi
2025-04-24 01:15:49
Güncelleme
2025-10-01 19:39:33
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-184 Picklescan MEDIUM Mmaitre314 2025

Referanslar

https://github.com/advisories/GHSA-93mv-x874-956g https://github.com/mmaitre314/picklescan/pull/40 https://github.com/advisories/GHSA-93mv-x874-956g