Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Stranger6667

#29918of 60,594
9.8Total CVSS
Vulnerabilities · 1
PT-2017-14497
2017-11-08
9.8
CVE-2017-16616
Pyanyapi
Pyanyapi
An issue exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py. The `load` function is used where `safe load` should have been used, allowing a YAML parser to execute arbitrary Python commands. This results in command execution and can be triggered by an attacker inserting Python into loaded YAML.