CVE-2019-3575

Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2019-01-03

Last modified

2024-08-04

Weaknesses

CWE-94

Affected products

• Sqla Yaml Fixtures (Sqla Yaml Fixtures Project)

References

• https://github.com/schettino72/sqla_yaml_fixtures/issues/20