Tablib CVE-2017-2810 Arbitrary Command Execution Vulnerability
BID:99076
Info
Tablib CVE-2017-2810 Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 99076 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-2810 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2017 12:00AM |
| Updated: | Jun 15 2017 12:00AM |
| Credit: | Cory Duplantis of Cisco Talos. |
| Vulnerable: |
python Tablib 0.11.4 |
| Not Vulnerable: |
python Tablib 0.11.5 |
Discussion
Tablib CVE-2017-2810 Arbitrary Command Execution Vulnerability
Tablib is prone to a remote arbitrary command-execution vulnerability.
An attacker can exploit this issue to execute arbitrary commands in context of the affected application.
Tablib 0.11.4 is vulnerable; other versions may also be affected.
Tablib is prone to a remote arbitrary command-execution vulnerability.
An attacker can exploit this issue to execute arbitrary commands in context of the affected application.
Tablib 0.11.4 is vulnerable; other versions may also be affected.
Exploit / POC
Tablib CVE-2017-2810 Arbitrary Command Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Tablib CVE-2017-2810 Arbitrary Command Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Tablib CVE-2017-2810 Arbitrary Command Execution Vulnerability
References:
References:
- tablib Homepage (Python)
- TALOS-2017-0307 Tablib Yaml Load Code Execution Vulnerability (talosintelligence.com)