critical9.8
CVE-2018-3784
A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.
Impact
A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cryo Project | Cryo | Version 0.0.6 |