CVE-2022-31691

2022-11-0419:15:10

[email protected]

web.nvd.nist.gov

cve-2022-31691

spring tools

eclipse

vscode

snakeyaml

yaml editing

remote code execution

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain circumstances allows for potentially harmful remote code execution by the attacker.

Affected configurations

NVD

Node

vmwarebosh_editorRange1.0.0–1.40.0

vmwarecloudfoundry_manifest_yml_supportRange1.0.0–1.40.0

vmwareconcourse_ci_pipeline_editorRange1.0.0–1.40.0

vmwarespring_boot_toolsRange1.0.0–1.40.0

vmwarespring_toolsRange4.0.0–4.16.1eclipse

CPENameOperatorVersion
vmware:bosh_editorvmware bosh editorlt1.40.0
vmware:cloudfoundry_manifest_yml_supportvmware cloudfoundry manifest yml supportlt1.40.0
vmware:concourse_ci_pipeline_editorvmware concourse ci pipeline editorlt1.40.0
vmware:spring_boot_toolsvmware spring boot toolslt1.40.0
vmware:spring_toolsvmware spring toolslt4.16.1

CPE	Name	Operator	Version
vmware:bosh_editor	vmware bosh editor	lt	1.40.0
vmware:cloudfoundry_manifest_yml_support	vmware cloudfoundry manifest yml support	lt	1.40.0
vmware:concourse_ci_pipeline_editor	vmware concourse ci pipeline editor	lt	1.40.0
vmware:spring_boot_tools	vmware spring boot tools	lt	1.40.0
vmware:spring_tools	vmware spring tools	lt	4.16.1

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Spring by VMware",
    "versions": [
      {
        "version": "Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support.",
        "status": "affected"
      }
    ]
  }
]