critical9.8
CVE-2019-7537
An issue was discovered in Donfig 0.3.0.
Impact
An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pytroll | Donfig | Version 0.3.0 |