Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f3j5-qrv6-xvc6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.

A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.

EPSS

Процентиль: 72%
0.00727
Низкий

7.2 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.2
nvd
больше 6 лет назад

A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.

CVSS3: 7.2
debian
больше 6 лет назад

A flaw was found in the yaml.load() function in the osbs-client versio ...

EPSS

Процентиль: 72%
0.00727
Низкий

7.2 High

CVSS3

Дефекты

CWE-502