CVE-2023-2251

🗓️ 24 Apr 2023 00:00:00Reported by @huntrdevType

Uncaught Exception in eemeli/yaml prior to 2.0.0-5. NV

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	1 Aug 202314:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to YAML denial of service vulnerabilitiy [CVE-2023-2251]	1 Feb 202413:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5.1 addresses security vulnerability listed in CVE below.	18 Jul 202323:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may be vulnerable to denial of service and improper file download via http-cache-semantics, Gin-Gonic, and YAML (CVE-2022-25881, CVE-2023-2251, CVE-2023-29401)	29 Aug 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Jan 202413:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2023-2251]	25 May 202312:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Decision Optimization in IBM Cloud Pak for Data is vulnerable to YAML denial of service (CVE-2023-2251)	29 Jun 202313:24	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.	27 Sep 202321:11	–	ibm

NVD

Node

yaml_project yamlRange2.0.0-5–2.2.2node.js

[
  {
    "vendor": "eemeli",
    "product": "eemeli/yaml",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.0.0-5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba
huntr	www.huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c

21 Nov 2024 07:58Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 37.5

EPSS0.00574

SSVC

CWE-248