CVE-2021-24040 | BDVDB-2026-160682 Detail

Description#

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-09-10Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.