Lucene search

K
osvGoogleOSV:GHSA-574Q-FXFJ-WV6H
HistoryOct 24, 2017 - 6:33 p.m.

Puppet Improper Input Validation vulnerability

2017-10-2418:33:37
Google
osv.dev
12

0.096 Low

EPSS

Percentile

94.8%

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to “serialized attributes.”