CVE-2016-3957 The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code....
CriticalCVSS 9.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryption_key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web2py | < 2.14.2 | 2.14.2 |
References
- devco.re exploit technical-description third-party-advisory
- github.com third-party-advisory
- USN-4030-1 vendor-advisory