CVEs-PoC/2021/CVE-2021-23338.md

CVE-2021-23338

Description

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

POC

Reference

• https://github.com/418sec/huntr/pull/1329
• https://github.com/418sec/huntr/pull/1329
• https://snyk.io/vuln/SNYK-PYTHON-QLIB-1054635
• https://snyk.io/vuln/SNYK-PYTHON-QLIB-1054635

Github

• https://github.com/ajmalabubakkr/CVE