High severity7.8NVD Advisory· Published Aug 28, 2018· Updated Jun 17, 2026
CVE-2018-14572
CVE-2018-14572
Description
In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
conference-scheduler-cliPyPI | <= 0.10.1 | — |
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/PyconUK/ConferenceScheduler-cli/issues/19nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-cf3c-fffp-34qhghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-14572ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/conference-scheduler-cli/PYSEC-2018-64.yamlghsaWEB
- joel-malwarebenchmark.github.io/blog/2020/04/25/cve-2018-14572-conference-scheduler-clighsaWEB
- joel-malwarebenchmark.github.io/blog/2020/04/25/cve-2018-14572-conference-scheduler-cli/nvd
News mentions
0No linked articles in our index yet.