Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Django Piston 输入验证漏洞
Vulnerability Description
Django是Django软件基金会的一套基于Python语言的开源Web应用框架。Django Piston是其中的一个REST API框架。 Django Piston 0.2.3之前版本和0.2.2.1之前0.2.x版本的emitters.py脚本中的yaml.load方法存在安全漏洞，该漏洞源于程序没有正确反序列化YAML数据。远程攻击者可利用该漏洞执行任意Python代码。
CVSS Information
N/A
Vulnerability Type
N/A