CVE-2016-4972

🗓️ 26 Sep 2016 16:00:00Reported by MendType

mend🔗 www.mend.io

Remote code execution in OpenStack Murano and python-muranoclient via crafted YAML tags.

Reporter	Title	Published	Views	Family All 24
CNVD	Arbitrary Code Execution Vulnerability in Multiple Openstack Products	28 Jun 201600:00	–	cnvd
CVE	CVE-2016-4972	26 Sep 201616:00	–	cve
Cvelist	CVE-2016-4972	26 Sep 201616:00	–	cvelist
Debian CVE	CVE-2016-4972	26 Sep 201616:00	–	debiancve
EUVD	EUVD-2016-0028	7 Oct 202500:30	–	euvd
Github Security Blog	OpenStack Murano Code Execution	17 May 202203:48	–	github
NVD	CVE-2016-4972	26 Sep 201616:59	–	nvd
OSV	DEBIAN-CVE-2016-4972	26 Sep 201616:59	–	osv
OSV	GHSA-87R7-Q54J-F9QG OpenStack Murano Code Execution	17 May 202203:48	–	osv
OSV	PYSEC-2016-22	26 Sep 201616:59	–	osv

Vulners

Node

OR

openstack murano-dashboardRange0–1.0.3

openstack python-muranoclientRange0.2–0.7.3

openstack murano-dashboardRange2.0.0–2.0.1

openstack python-muranoclientRange0.8.0–0.8.5

openstack muranoRange0–1.0.3

Source	Link
pypi	www.pypi.org/project/murano
openwall	www.openwall.com/lists/oss-security/2016/06/23/8
github	www.github.com/pypa/advisory-database/tree/main/vulns/python-muranoclient/PYSEC-2016-22.yaml
github	www.github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
pypi	www.pypi.org/project/murano-dashboard
bugs	www.bugs.launchpad.net/murano/+bug/1586079
bugs	www.bugs.launchpad.net/python-muranoclient/+bug/1586078
github	www.github.com/openstack/murano/commit/28de8c36c9dbe4aaf4d062e6fb6099afd437f49b
github	www.github.com/advisories/GHSA-87r7-q54j-f9qg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-4972

06 Oct 2026 02:36Current

CVSS 49.3

CVSS 3.19.8

CVSS 27.5

CVSS 39.8

EPSS0.03193

OpenStack Murano python-muranoclient remote code execution yaml.Loader crafted YAML tags