Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-24040

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.318
EPSS Ranking 96.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2021-24040
  • Facebook » Parlai » Version: 0.1.20200409
    cpe:2.3:a:facebook:parlai:0.1.20200409
  • Facebook » Parlai » Version: 0.1.20200416
    cpe:2.3:a:facebook:parlai:0.1.20200416
  • Facebook » Parlai » Version: 0.1.20200716
    cpe:2.3:a:facebook:parlai:0.1.20200716
  • Facebook » Parlai » Version: 0.10.0
    cpe:2.3:a:facebook:parlai:0.10.0
  • Facebook » Parlai » Version: 0.8.0
    cpe:2.3:a:facebook:parlai:0.8.0
  • Facebook » Parlai » Version: 0.9.0
    cpe:2.3:a:facebook:parlai:0.9.0
  • Facebook » Parlai » Version: 0.9.1
    cpe:2.3:a:facebook:parlai:0.9.1
  • Facebook » Parlai » Version: 0.9.2
    cpe:2.3:a:facebook:parlai:0.9.2
  • Facebook » Parlai » Version: 0.9.3
    cpe:2.3:a:facebook:parlai:0.9.3
  • Facebook » Parlai » Version: 0.9.4
    cpe:2.3:a:facebook:parlai:0.9.4
  • Facebook » Parlai » Version: 1.0.0
    cpe:2.3:a:facebook:parlai:1.0.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved