CVE-2017-20285

Summary

This flaw allows an attacker to execute arbitrary code by triggering the DESTROY method of a class, potentially leading to unauthorized directory deletion.

Exploitability

Exploitation is moderately hard as it requires the attacker to control the YAML document and have the necessary Perl modules loaded.

Blast radius

If exploited, the impact could be significant, as it allows for the deletion of directory trees, potentially leading to data loss or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to YAML version 1.30 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.