Arbitrary Code Execution Affecting sqla-yaml-fixtures package, versions [0,]
Threat Intelligence
EPSS
0.04% (6th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-SQLAYAMLFIXTURES-1579274
- published 1 Sep 2021
- disclosed 4 Jan 2019
- credit bigbigliang-malwarebenchmark
How to fix?
There is no fixed version for sqla-yaml-fixtures.
Overview
sqla-yaml-fixtures is a package that loads YAML data fixtures for SQLAlchemy.
Affected versions of this package are vulnerable to Arbitrary Code Execution via the fixture_text argument in sqla_yaml_fixtures.load.
PoC
import sqla_yaml_fixtures
test_str ='!!python/object/apply:os.system ["dir"]'
sqla_yaml_fixtures.load('a','a',test_str)
References
CVSS Scores
version 3.1