CVE-2019-7537:

An arbitrary code execution vulnerability in Donfig 0.3.0 via the collect_yaml method in config_obj.py, enabling execution of arbitrary Python commands.

Score
A numerical rating that indicates how dangerous this vulnerability is.

9.8Critical

Published Date:Mar 21, 2019
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:3.5
EPSS Percentile:88%

Exploitability

Score:3.9
Attack Vector:NETWORK
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

An arbitrary code execution vulnerability in Donfig 0.3.0 via the collect_yaml method in config_obj.py, enabling execution of arbitrary Python commands.

Overview

Donfig 0.3.0 contains a code execution vulnerability in the collect_yaml method of config_obj.py. The issue allows an attacker to execute arbitrary Python commands through crafted YAML input, potentially enabling full system compromise. The provided data indicate the vulnerability affects Donfig 0.3.0 and is triggered during YAML collection/processing, underscoring the risk posed by processing untrusted configuration data.

Remediation

Upgrade Donfig to the latest secure release or apply the official patch that fixes the collect_yaml vulnerability. Verify release notes or advisories for the exact fixed version.
If a patch is not yet available, modify the code to replace the YAML loader with a safe loader (for example, use YAML safe_load instead of a loader that can instantiate Python objects) and remove any code paths that execute commands or imports from YAML content.
Restrict input sources: only accept YAML from trusted, authenticated sources; implement input validation and strict schemas for configuration data.
Run Donfig in a least-privilege environment (e.g., containerized with restricted capabilities, limited network access) and ensure file system permissions minimize impact.
After applying a patch or remediation, re-run tests to confirm the vulnerability is mitigated and monitor project advisories for any related follow-ups.