CVE-2017-1000248 - Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis

CRITICAL

Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis

Published Nov 17, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 1.98%

Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

Link	Providers	Tags
https://github.com/advisories/GHSA-2w67-526p-gm73		Advisory
https://github.com/redis-store/redis-store/commit/ce13252c26fcc40ed4935c9abfeb0ee0761e5704
https://github.com/redis-store/redis-store/commit/e0c1398d54a9661c8c70267c3a925ba6b192142e		x_refsource_MISCPatchThird Party Advisory
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/redis-store/CVE-2017-1000248.yml
https://nvd.nist.gov/vuln/detail/CVE-2017-1000248