Lucene search

K
prionPRIOn knowledge basePRION:CVE-2011-4104
HistoryOct 27, 2014 - 1:55 a.m.

Design/Logic Flaw

2014-10-2701:55:00
PRIOn knowledge base
www.prio-n.com
1

8 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

CPENameOperatorVersion
tastypiele0.9.9

8 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%