Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2012/07/27 1:56 a.m.20 views

Potential remote code execution due to embedding of old django-piston

The exposed atlassian api for forummodules found under forummodules/atlassian/api uses an outdated version of django-piston which does not contain the fix for a remote code execution bug due to the use of yaml.load instead of safeload in the emitters.py python scripton line 412. Whilst it appears...

2.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder