NVD

Id
10629  
Name
CVE-2011-4103  
Description
emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-10-26  
Modified Date
2014-12-18  
Seq
2011-4103  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60072 10629 CVE-2011-4103 DSA-2344  View
60073 10629 CVE-2011-4103 [oss-security] 20111101 Re: CVE request for Django-piston and Tastypie  View
60074 10629 CVE-2011-4103 https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/  View
60075 10629 CVE-2011-4103 https://bugzilla.redhat.com/show_bug.cgi?id=750658  View
60076 10629 CVE-2011-4103 https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35101 JVNDB-2011-005343 Django Piston の emitters.py における任意の Python コードを実行される脆弱性 Django Piston の emitters.py は、YAML データを適切に非シリアル化しないため、任意の Python コードを実行される脆弱性が存在します。 CVE-2011-4103 52010 CVE-2011-4103 10629 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005343.html 2011-11-01 2014-10-29 View