CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972

CVE-2016-4972 – OpenStack Murano YAML loader misuse leading to RCE . Affected: OpenStack Murano (pre-1.0.3, Liberty) and Murano 2.x before 2.0.1 (Mitaka); Murano-dashboard before 1.0.3 and 2.x before 2.0.1; python-muranoclient before 0.7.3 (Liberty) and 0.8.x before 0.8.5 (Mitaka). Detail: Murano...