emitters.py in Django Piston does not properly deserialize YAML data, allowing remote code execution
Reporter | Title | Published | Views | Family All 13 |
---|---|---|---|---|
![]() | CVE-2011-4103 | 27 Oct 201401:00 | – | cvelist |
![]() | Debian Security Advisory DSA 2344-1 (python-django-piston) | 11 Feb 201200:00 | – | openvas |
![]() | Debian: Security Advisory (DSA-2344-1) | 11 Feb 201200:00 | – | openvas |
![]() | CVE-2011-4103 | 27 Oct 201400:00 | – | ubuntucve |
![]() | Debian DSA-2344-1 : python-django-piston - deserialization vulnerability | 14 Nov 201100:00 | – | nessus |
![]() | Django-piston and Django-tastypie do not properly deserialize YAML data | 23 Jul 201819:50 | – | github |
![]() | GHSA-PVHP-V9QP-XF5R Django-piston and Django-tastypie do not properly deserialize YAML data | 23 Jul 201819:50 | – | osv |
![]() | PYSEC-2014-24 | 27 Oct 201401:55 | – | osv |
![]() | DSA-2344-1 python-django-piston - deserialization vulnerability | 11 Nov 201100:00 | – | osv |
![]() | [SECURITY] [DSA 2344-1] python-django-piston security update | 11 Nov 201120:36 | – | debian |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
Debian | 9 | all | python-django-piston | 0.2.3-2 | python-django-piston_0.2.3-2_all.deb |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo