CVE-2017-2810

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4

High · published June 14, 2017

CVSS v3.0
7.5
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04870 · 92.0th percentile
Published
2017-06-14T13:00Z
EPSS history
Timeline
  • 14 JUN 13:00Z
    An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4
    cvelistv5