CVE-2019-16328

In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.

References

Affected packages

Git / github.com/tomerfiliba-org/rpyc

Affected ranges

Type

GIT

Repo

https://github.com/tomerfiliba-org/rpyc

Events

Introduced

09eba8675d1de23a557ba869c078937e7dc1f601

Last affected

d50c3787a32b4f1f252a0c724d6fb30154b3238e

Database specific

Show details

{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:rpyc_project:rpyc:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.1"
        }
    ]
}

Affected versions

4.*

4.1.0

4.1.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-16328.json"