Description

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named 14b4cae704a0bb4eb6723e238f25382d847a1917. It is recommended to upgrade the affected component.

INFO

Published Date :

2025-05-26T07:31:06.272Z

Last Modified :

2025-05-28T17:36:15.929Z

Source :

VulDB
AFFECTED PRODUCTS

The following products are affected by CVE-2025-5175 vulnerability.

Vendors Products
Erdogant
  • Pypickle
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-5175.

URL Resource
https://github.com/erdogant/pypickle/commit/14b4cae704a0bb4eb6723e238f25382d847a1917 cve-icon cve-icon
https://github.com/erdogant/pypickle/issues/3 cve-icon cve-icon cve-icon
https://github.com/erdogant/pypickle/issues/3#issue-3070689116 cve-icon cve-icon
https://github.com/erdogant/pypickle/issues/3#issuecomment-2888589652 cve-icon cve-icon
https://github.com/erdogant/pypickle/releases/tag/2.0.0 cve-icon cve-icon
https://vuldb.com/?ctiid.310263 cve-icon cve-icon
https://vuldb.com/?id.310263 cve-icon cve-icon
https://vuldb.com/?submit.579824 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Access Vector
Access Complexity
Authentication
Confidentiality Impact
Integrity Impact
Availability Impact