CVE-2018-3784

A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.

Score

CVSS 3.1 9.8 Critical

Status

Modified - support@hackerone.com

Published

2018-08-17

Last modified

2024-08-05

Weaknesses

CWE-502, CWE-94

Affected products

• Cryo (Cryo Project)
• Cryo (Httpsgithub.comhunterloftis)

References

• https://hackerone.com/reports/350418