CVE-2017-2810

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:python:tablib:0.11.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-06-14 13:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-2810

Mitre link : CVE-2017-2810

CVE.ORG link : CVE-2017-2810


JSON object : View

Products Affected

python

  • tablib