Deserialization of Untrusted Data
Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) allows attackers to execute arbitrary scripts.
Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) allows attackers to execute arbitrary scripts.