Security Advisory

CVE-2019-20478

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-19 03:09:08

Last updated 2024-08-05 02:39:10

Assigner mitre

State PUBLISHED

Description

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

← Browse all CVEs View on cve.org ↗