NetSight
critical9.8

CVE-2021-27213

config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.

Impact

config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.

Affected products

VendorProductAffected versions
Pystemon ProjectPystemon
before 2021-02-13

Weakness classification

References