An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-11-10T09:00:00
Updated: 2024-08-05T20:35:21.029Z
Reserved: 2017-11-10T00:00:00
Link: CVE-2017-16764
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-11-10T09:29:00.410
Modified: 2019-12-11T15:03:48.683
Link: CVE-2017-16764
Redhat
No data.