Upwind Security MDR@UpwindMDR
Disclosure
🚨Critical - jsonpickle Remote Code Execution via Malicious py/repr (CVE-2021-47952) jsonpickle 2.0.0 contains a critical remote code execution vulnerability. It allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings that invoke eval() during deserialization, leading to full system compromise. 👉Affected: jsonpickle 2.0.0
Post summary
The text discloses a critical RCE vulnerability in jsonpickle 2.0.0 that allows attackers to execute arbitrary Python commands via malicious py/repr objects, but it does not provide any PoC, exploit code, patch, or evidence of active exploitation.
00010100
196 followersView on X
