VULNERABILITY INTELLIGENCE

CVE-2011-4104

CVSS score7.5 HIGH
EPSS probability2.43%
CISA KEVNot currently listed
Published2014-10-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references