exploitDog

GHSA-63rf-cwpf-vw2p

Опубликовано: 14 мая 2022

Источник: github

Github: Не прошло ревью

Описание

The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.

The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2013-4957
https://exchange.xforce.ibmcloud.com/vulnerabilities/88089
http://osvdb.org/98639
http://puppetlabs.com/security/cve/cve-2013-4957
http://secunia.com/advisories/55362

EPSS

Процентиль: 64%

0.01122

Низкий

CVE ID

Дефекты

CWE-94

Связанные уязвимости

CVE-2013-4957

ubuntu

почти 13 лет назад

The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.

CVE-2013-4957

nvd

почти 13 лет назад

The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.

EPSS

Процентиль: 64%

0.01122

Низкий

CVE ID

Дефекты

CWE-94