GitHub Advisoryadvisory · PyPI

GHSA-jqmc-fxxp-r589 Deserialization of Untrusted Data in Tendenci

CRITICAL Published 2021-06-18 Modified 2024-10-28 Official page ↗

Aliases: CVE-2020-14942
Ecosystem: PyPI
Packages: tendenci
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-502
Reviewed: 2021-05-11

Affected packages

• PyPI tendenci: < 12.0.11 → fixed in 12.0.11

Description

Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.

Related

Alias · CVE (1)

CVE-2020-14942 Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. vulnerability

Weakness · CWE (1)

CWE-502 Deserialization of Untrusted Data weakness

References