Security Advisory

CVE-2017-2810

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-14 13:00:00

Last updated 2024-08-05 14:02:07

Assigner talos

CVSS score 7.5

State PUBLISHED

Description

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗