Uncontrolled Deserialization Vulnerability in Frost Ming Redis Wrapper
CVE-2019-17206

9.8CRITICAL

Key Information:

Vendor: Redis Wrapper Project
Status: Redis Wrapper
Vendor: CVE Published:; 5 October 2019

🔔 Create Redis Wrapper Project Vulnerability Alert

What is CVE-2019-17206?

The Redis Wrapper by Frost Ming is prone to an uncontrolled deserialization vulnerability due to the mishandling of pickled objects in models.py. This flaw, present in versions before 0.3.0, can be exploited by attackers to execute arbitrary scripts, leading to potential unauthorized access and system compromise. It is imperative for users to upgrade to the latest version to mitigate this risk effectively.