Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-3567

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-f7p5-w2cr-7cp7

Puppet Improper Input Validation vulnerability Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.

gitlab/gem/puppet/CVE-2013-3567

Improper Input Validation Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.