EUVD-2017-0019

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Exploitable vulnerability in Confire 0.2.0 allows command execution via YAML parsing in config.py

Reporter	Title	Published	Views	Family All 13
CNVD	Confire config.py File Arbitrary Command Execution Vulnerability	13 Nov 201700:00	–	cnvd
CVE	CVE-2017-16763	10 Nov 201709:00	–	cve
Cvelist	CVE-2017-16763	10 Nov 201709:00	–	cvelist
Github Security Blog	Unsafe deserialization in confire	18 Jul 201818:28	–	github
NVD	CVE-2017-16763	10 Nov 201709:29	–	nvd
OSV	CVE-2017-16763	10 Nov 201709:29	–	osv
OSV	GHSA-M85C-9MF8-M2M6 Unsafe deserialization in confire	18 Jul 201818:28	–	osv
OSV	PYSEC-2017-78	10 Nov 201709:29	–	osv
Prion	Input validation	10 Nov 201709:29	–	prion
PyPA	PYSEC-2017-78	10 Nov 201709:29	–	pypa

[
  {
    "enisaIdVendor": [
      {
        "id": "d0c3f668-749f-335c-a81d-445673021594",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "750ae554-1051-30b8-a5f2-3a58ee273964",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/bbengfort/confire/issues/24
joel-malwarebenchmark	www.joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire/
github	www.github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea
github	www.github.com/advisories/GHSA-m85c-9mf8-m2m6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-16763
github	www.github.com/pypa/advisory-database/tree/main/vulns/confire/PYSEC-2017-78.yaml
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.3High risk

Vulners AI Score9.3

CVSS 39.8

CVSS 27.5

EPSS0.01919