CVE-2021-23338

Deserialization of Untrusted Data

Medium · published February 15, 2021

CVSS v3.1
6.6
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.03584 · 89.4th percentile
Published
2021-02-15T15:50Z
EPSS history
Timeline
  • 15 FEB 15:50Z
    Deserialization of Untrusted Data
    cvelistv5