CVE-2019-10135
- State
- Published
- Severity
- 7.2 High
- Published
- Jul 11, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 27, 2019
Description
A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.2 High | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
osbs-clientRed Hat |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.