CVE-2013-4957: Puppet Enterprise

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.

Affected products

• Puppet Puppet Enterprise: up to and including 3.0.0; version 2.5.1 only; version 2.5.2 only; version 2.8.0 only; version 2.8.1 only; version 2.8.2 only; …

Published 2013-10-25. Last modified 2026-06-16.