Lucene search
K

CVE-2023-49297

🗓️ 05 Dec 2023 20:51:24Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 44 Views

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization can lead to arbitrary code execution. A maliciously crafted YAML file can cause code execution when PyDrive2 is run in the same directory or loaded via `LoadSettingsFile`. Affects GoogleAuth initialization from this package. Update to version 1.16.2 to mitigate

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2023-49297
5 Dec 202313:13
circl
CNNVD
PyDrive2 代码问题漏洞
5 Dec 202300:00
cnnvd
CNVD
PyDrive2 suffers from a deserialization command execution vulnerability
18 Dec 202300:00
cnvd
Cvelist
CVE-2023-49297 Unsafe YAML deserialization in PyDrive2
5 Dec 202320:51
cvelist
Debian CVE
CVE-2023-49297
5 Dec 202320:51
debiancve
EUVD
EUVD-2023-0292
3 Oct 202520:07
euvd
Fedora
[SECURITY] Fedora 39 Update: PyDrive2-1.18.0-1.fc39
15 Dec 202319:04
fedora
Fedora
[SECURITY] Fedora 38 Update: PyDrive2-1.18.0-1.fc38
16 Dec 202301:26
fedora
Tenable Nessus
Fedora 38 : PyDrive2 (2023-21d2191c73)
15 Dec 202300:00
nessus
Tenable Nessus
Fedora 40 : PyDrive2 (2023-392085b92b)
29 Apr 202400:00
nessus
Rows per page
NVD
Vulners
Node
iterativepydrive2Range<1.16.2
OR
[
  {
    "vendor": "iterative",
    "product": "PyDrive2",
    "versions": [
      {
        "version": "< 1.16.2",
        "status": "affected"
      },
      {
        "version": "= 1.17.0",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 08:33Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.13.3 - 7.8
EPSS0.00107
44