Devsite

A security researcher has disclosed a remote code execution vulnerability found in Google, reportedly earning a $90,000 bounty through Google's bug bounty program. The writeup describes how a Flask session pickle flaw in Google's DevSite could be exploited to execute code. The detailed technical disclosure is drawing attention from developers and security professionals.

Security researcher Simon Koeck has published a writeup describing a remote code execution vulnerability he found in Google, reportedly earning a $90,000 bounty. The flaw involves Flask session pickle deserialization on Google Devsite. The disclosure is being circulated and discussed among developers and security commentators online.