Remote Code Execution (RCE)

django-make-app is vulnerable to remote code execution RCE attacks. The vulnerability exists due to the usage of the insecure usage of YAML.load...

Django-make-app Arbitrary Command Execution Vulnerability

djangomakeapp is a tool for generating code for Django applications. A security vulnerability exists in the YAML parsing function of the readyamlfile method of the ioutils.py file in djangomakeapp version 0.1.3. An attacker can exploit this vulnerability by injecting Python into loaded YAML to...

PYSEC-2017-79

An exploitable vulnerability exists in the YAML parsing functionality in the readyamlfile method in ioutils.py in djangomakeapp 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability...

PT-2017-14546

Name of the Vulnerable Software and Affected Versions django make app version 0.1.3 Description The issue concerns the YAML parsing functionality in the read yaml file method within io utils.py. This allows a YAML parser to execute arbitrary Python commands, resulting in command execution. An...