未評価
In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an...
CVE-2019-16328
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- package github.com
- report rpyc.readthedocs.io
- web lists.opensuse.org
- web lists.opensuse.org