Executive brief
SnakeYaml Constructor Deserialization Remote Code Execution
Affected products
- Maven org.yaml:snakeyaml
Junglewise Threat Intelligence
CVE-2022-1471: SnakeYaml Constructor Deserialization Remote Code Execution
CVE-2022-1471 · Severity: low · CVSS 3.1 · Published 2022-12-12
Technologies: org.yaml:snakeyaml (Maven). Vendors: Maven.
Related threats
- Snakeyaml vulnerable to Stack overflow leading to denial of service
- snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write
- snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write
- snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write
- snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write