How severe is CVE-2025-46417?

CVE-2025-46417 has a CVSS v3 score of 7.5 (HIGH).

CVE-2025-46417

Name: picklescan
Author: mmaitre314

7.5HIGH

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

发布于: 4/24/2025更新于: 10/1/2025

描述

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

AI分析AI驱动

受影响产品

mmaitre314picklescan

参考资料

https://github.com/advisories/GHSA-93mv-x874-956g
ExploitThird Party Advisory
https://github.com/mmaitre314/picklescan/pull/40
Issue TrackingPatch
https://github.com/advisories/GHSA-93mv-x874-956g
ExploitThird Party Advisory