codeql icon indicating copy to clipboard operation
codeql copied to clipboard

Python: XML RPC Dotted Names

Open dilanbhalla opened this issue 5 years ago • 0 comments

This query warns against enabling the allow_dotted_names option when registering an instance of SimpleXMLRPCServer, as this allows intruders to access your module’s global variables and may execute arbitrary code on your machine. This should only be used within a secure, closed network.

dilanbhalla avatar Jul 06 '20 21:07 dilanbhalla