CVE-2020-13092

CVE-2020-13092

scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call.

Source: CVE-2020-13092

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다