Remote Code execution in SnakeYAML
58Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 8.3epss 100%
da publicação à arma306 dias
Publicada no NVD1 de dez.
metasploit+306d
probabilidade de exploração
100%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
SnakeYAML · SnakeYAMLReferências
http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.htmlhttps://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.htmlhttps://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2https://github.com/mbechler/marshalsechttps://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnchttps://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4chttps://security.netapp.com/advisory/ntap-20230818-0015/https://security.netapp.com/advisory/ntap-20240621-0006/https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=truehttp://www.openwall.com/lists/oss-security/2023/11/19/1