{"id":32688,"date":"2026-10-05T16:30:42","date_gmt":"2026-10-05T08:30:42","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2019-25777"},"modified":"2026-10-05T16:30:42","modified_gmt":"2026-10-05T08:30:42","slug":"cve-2019-25777","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2019-25777","title":{"rendered":"CVE-2019-25777 &#8211; YAML versions before 1.27_001 for Perl allow a loaded perl\/glob document to replace any pa"},"content":{"rendered":"<p>YAML versions before 1.27_001 for Perl allow a loaded perl\/glob document to replace any package variable, which can lead to arbitrary code execution.<\/p>\n<p>A perl\/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or YAML&#8217;s own load options.<\/p>\n<p>A perl\/glob document that sets $YAML::LoadCode or $YAML::UseCode turns on code loading, which is off by default, for every later Load() in the process. A perl\/code document is then passed to a string eval, so an attacker who supplies two documents to separate Load() calls in one process can execute arbitrary Perl code.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>YAML versions before 1.27_001 for Perl allow a loaded perl\/glob document to replace any package variable, which can lead to arbitrary code execution.<\/p>\n<p>A perl\/glob document names a package and a symbol<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-32688","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/32688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=32688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=32688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=32688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}