Lucene search
+L

81 matches found

osv_ghsa
osv_ghsa
•added 2018/07/13 4:01 p.m.•27 views

GHSA-GCR6-RF47-JRGF Loaded Databook of Tablib prone to python insertion resulting in command execution

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

9.8CVSS6.1AI score0.0487EPSS
SaveExploits2References7
Rows per page
Query Builder