by Kastro
Paper/Archive/CVE-2022-35411

CVE-2022-35411

mitre — rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent.

EPSS 47%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.8.988 × 2019.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmedium.com/%40elias.hohl/remote-code-execution-0-day-in-rpc-py-709c76690c30refgithub.com/ehtec/rpcpy-exploitrefgithub.com/abersheeran/rpc.py/commit/491e7a841ed9a754796d6ab047a9fb16e23bf8bdrefpacketstormsecurity.com/files/167872/rpc.py-0.6.0-Remote-Code-Execution.html