CVE-2020-14942: Deserialization of Untrusted Data in Tendenci

June 18, 2021 (updated October 28, 2024)

Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.

References

github.com/advisories/GHSA-jqmc-fxxp-r589
github.com/pypa/advisory-database/tree/main/vulns/tendenci/PYSEC-2020-112.yaml
github.com/tendenci/tendenci/issues/867
nvd.nist.gov/vuln/detail/CVE-2020-14942

Code Behaviors & Features

Detect and mitigate CVE-2020-14942 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →