CVE-2017-16763 – confire

Package

Manager: pip
Name: confire
Vulnerable Version: >=0 <=0.2.0

Severity

Level: Critical

CVSS v3.1: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.01919 pctl0.82634

Details

Unsafe deserialization in confire An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from "~/.confire.yaml" using the yaml.load function, a YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.

Metadata

Created: 2018-07-18T18:28:26Z
Modified: 2024-09-13T18:29:06Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/07/GHSA-m85c-9mf8-m2m6/GHSA-m85c-9mf8-m2m6.json
CWE IDs: []
Alternative ID: GHSA-m85c-9mf8-m2m6
Finding: F096
Auto approve: 1