CVE-2011-4104

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute…

published October 27, 2014

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02429 · 84.0th percentile
Published
2014-10-27T01:00Z
EPSS history
Timeline
  • 27 OCT 01:00Z
    The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute…
    cvelistv5