Lucene search
HistoryNov 02, 2023 - 6:15 a.m.
CVE-2023-47204
yaml deserialization
transmute-core
python code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
31.1%
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
Affected configurations
Node
toumorokoshitransmute-coreRange<1.13.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| toumorokoshi | transmute-core | * | cpe:2.3:a:toumorokoshi:transmute-core:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-47204
2023-11-02 06:15:08
veracode
veracode
Remote Code Execution (RCE)
2023-11-03 05:32:50
vulnrichment
vulnrichment
CVE-2023-47204
2023-11-02 00:00:00
osv
osv
transmute-core unsafe YAML deserialization vulnerability
2023-11-02 06:30:25
PYSEC-2023-223
2023-11-02 06:15:00
CVE-2023-47204
2023-11-02 06:15:08
prion
prion
Deserialization of untrusted data
2023-11-02 06:15:00
cvelist
cvelist
CVE-2023-47204
2023-11-02 00:00:00
github
github
transmute-core unsafe YAML deserialization vulnerability
2023-11-02 06:30:25
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
31.1%
Related for NVD:CVE-2023-47204