What’s Vulnerable › Vulnerabilities

CVE-2017-16764

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-11-10 · updated 2026-06-17

Description

An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can execute arbitrary Python commands resulting in command execution. An attacker can insert Python into loaded YAML to trigger this vulnerability.

Affected products

• Django Make App Project Django Make App: 0.1.3

References

• https://github.com/illagrenan/django-make-app/issues/5
• https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app/
• https://github.com/illagrenan/django-make-app/issues/5
• https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16764-vulnerability-in-django-make-app/

Get alerted when CVE-2017-16764 or the next vulnerability affects your stack