Pickle deserialization just paid someone 90k
A researcher found remote code execution in Google's developer portal by exploiting Flask session cookies. The vulnerability chain is textbook insecure deserialization.
Read the note 1 min read
From the notebook
deserialization.
1 note on this topic.