Lucene search
+L
Osbs-client ProjectOsbs-client

1 matches found

CVE
CVE
added 2019/07/11 12:0 a.m.56 views

CVE-2019-10135

The CVE-2019-10135 issue affects osbs-client (versions 0.46–0.56.0) where insecure use of yaml.load() can lead to code execution by parsing crafted YAML. Root cause is unsafe loading of YAML objects within the client. Impact is potential remote code execution via YAML parsing, with affected compo...

7.2CVSS7.1AI score0.01886EPSS
Save