Google paid $90,000 bounty for Flask session pickle RCE vulnerability
securitybug bountyRCEGoogleFlaskvulnerabilityremote code executionpicklecybersecurity
A security researcher received a $90,000 bug bounty from Google for discovering a Remote Code Execution (RCE) vulnerability. The vulnerability involved a Flask session pickle RCE found on a Google developer site. The researcher shared a detailed writeup of the discovery and exploitation process on their website.