Lucene search
K

28 matches found

OSV
OSV
added 2023/12/05 9:15 p.m.0 views

UBUNTU-CVE-2023-49297

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS6.3AI score0.00107EPSS
Exploits1References4
OSV
OSV
added 2023/12/05 9:15 p.m.4 views

PYSEC-2023-291

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS7.9AI score0.00107EPSS
Exploits1References4
OSV
OSV
added 2023/12/05 8:51 p.m.14 views

CVE-2023-49297 Unsafe YAML deserialization in PyDrive2

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

3.3CVSS8AI score0.00107EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2023/12/05 8:51 p.m.15 views

CVE-2023-49297

Removed by vendor...

7.8CVSS7.6AI score0.00107EPSS
Exploits1
CVE
CVE
added 2023/12/05 8:51 p.m.41 views

CVE-2023-49297

PyDrive2 contains an unsafe YAML deserialization vulnerability that allows arbitrary code execution when a malicious YAML file is present in the same directory or loaded via LoadSettingsFile during GoogleAuth initialization. The issue affects PyDrive2 prior to the fixed release, with a commit c57...

7.8CVSS6.1AI score0.00107EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2023/12/05 8:51 p.m.17 views

CVE-2023-49297 Unsafe YAML deserialization in PyDrive2

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

3.3CVSS8.1AI score0.00107EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.1 views

PyDrive2 代码问题漏洞

PyDrive2 is Iterative open source a google-api-python-client wrapper library . PyDrive2 has a deserialization command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...

7.8CVSS7.9AI score0.00107EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/12/05 12:0 a.m.4 views

PT-2023-31157 · Google · Google-Api-Python-Client

Name of the Vulnerable Software and Affected Versions: PyDrive2 versions prior to 1.16.2 Description: PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserialization will result in arbitrary code execution. A maliciously...

7.8CVSS7.7AI score0.00107EPSS
Exploits1References18
Rows per page
Query Builder