CVE-2013-4957
published 2013-10-25CVE-2013-4957: The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.
PriorityP432medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.12%
62.2th percentile
The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| puppet | puppet_enterprise | <= 3.0.0 | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/98639http://puppetlabs.com/security/cve/cve-2013-4957http://secunia.com/advisories/55362https://exchange.xforce.ibmcloud.com/vulnerabilities/88089http://osvdb.org/98639http://puppetlabs.com/security/cve/cve-2013-4957http://secunia.com/advisories/55362https://exchange.xforce.ibmcloud.com/vulnerabilities/88089
2013-10-25
Published