Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2022-1471
HistoryDec 01, 2022 - 11:15 a.m.

CVE-2022-1471

2022-12-0111:15:10
Google
osv.dev
11

9.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.7%

JSON

SnakeYaml’s Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml’s SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

Related

nessus 25
ibm 49
osv 6
oraclelinux 1
hackerone 1
f5 1
atlassian 3
cgr 1
cve 2
prion 2
githubexploit 1
redhatcve 1
github 2
ubuntucve 1
cvelist 2
rocky 2
debiancve 1
redos 1
veracode 1
almalinux 1
redhat 29
packetstorm 1
metasploit 1
zdt 1
rapid7blog 1
thn 2
hivepro 1
qualysblog 5
oracle 5
nessus
nessus
Atlassian Confluence 6.13.x < 7.13.18 / 7.14.x < 7.19.10 / 7.20.x < 8.3.1 (CONFSERVER-91463)
2023-12-13 00:00:00
Atlassian Bitbucket < 7.21.16 / 8.8.7 / 8.9.4 / 8.10.3 / 8.11.3 / 8.12.2 RCE
2023-12-19 00:00:00
Rocky Linux 8 : prometheus-jmx-exporter (RLSA-2022:9058)
2023-01-30 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a arbitrary code execution in SnakeYaml (CVE-2022-1471)
2023-06-28 19:54:12
Security Bulletin: Deserialization vulnerability affect IBM Business Automation Workflow BPM Event Emitters - CVE-2022-1471
2023-05-12 10:44:12
Security Bulletin: There is a security vulnerability in snakeYAML used by IBM Maximo Data Loader (CVE-2022-1471)
2023-03-29 09:34:44
osv
osv
Important: prometheus-jmx-exporter security update
2022-12-15 15:08:09
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
oraclelinux
oraclelinux
prometheus-jmx-exporter security update
2022-12-15 00:00:00
hackerone
hackerone
Kubernetes: The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML
2022-12-15 19:07:04
f5
f5
K000132638 : SnakeYAML vulnerability CVE-2022-1471
2023-02-16 00:00:00
atlassian
atlassian
RCE (Remote Code Execution) in - CVE-2022-1471
2023-10-08 08:44:33
RCE (Remote Code Execution) in Bitbucket Data Center and Server - CVE-2022-1471
2023-09-19 20:41:22
RCE (Remote Code Execution) in Confluence Data Center and Server - CVE-2022-1471
2023-09-11 21:13:51
cgr
cgr
CVE-2022-1471 vulnerabilities
2024-04-30 09:06:13
cve
cve
CVE-2022-1471
2022-12-01 11:15:00
CVE-2023-46302
2023-11-20 09:15:07
prion
prion
Deserialization of untrusted data
2022-12-01 11:15:00
Design/Logic Flaw
2023-11-20 09:15:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Snakeyaml Project Snakeyaml
2023-03-02 16:33:02
redhatcve
redhatcve
CVE-2022-1471
2022-12-01 15:56:23
github
github
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
Deserialization of Untrusted Data in apache-submarine
2023-11-20 09:30:31
ubuntucve
ubuntucve
CVE-2022-1471
2022-12-01 00:00:00
cvelist
cvelist
CVE-2022-1471 Remote Code execution in SnakeYAML
2022-12-01 10:47:07
CVE-2023-46302 Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization
2023-11-20 08:46:56
rocky
rocky
prometheus-jmx-exporter security update
2022-12-15 15:08:09
Satellite 6.13 Release
2023-05-05 15:39:58
debiancve
debiancve
CVE-2022-1471
2022-12-01 11:15:00
redos
redos
ROS-20240514-03
2024-05-14 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-12-02 17:22:00
almalinux
almalinux
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
redhat
redhat
(RHSA-2022:9058) Important: prometheus-jmx-exporter security update
2022-12-15 15:08:09
(RHSA-2023:0697) Important: OpenShift Container Platform 4.10.52 security update
2023-02-15 15:39:07
(RHSA-2022:9032) Important: Red Hat build of Eclipse Vert.x 4.3.4 security update
2022-12-15 12:38:08
packetstorm
packetstorm
PyTorch Model Server Registration / Deserialization Remote Code Execution
2023-10-13 00:00:00
metasploit
metasploit
PyTorch Model Server Registration and Deserialization RCE
2023-10-12 13:27:26
zdt
zdt
PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
2023-10-15 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-10-13 17:03:36
thn
thn
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
2023-10-03 16:24:00
Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution
2023-12-06 09:18:00
hivepro
hivepro
Atlassian Addresses Critical RCE Flaws
2023-12-07 12:45:52
qualysblog
qualysblog
Oracle Patch Update, April 2024 Security Update Review
2024-04-17 14:39:59
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

9.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.7%

JSON
Related for OSV:CVE-2022-1471
nessus25ibm49osv6oraclelinux1hackerone1f51atlassian3cgr1cve2prion2githubexploit1redhatcve1github2ubuntucve1cvelist2rocky2debiancve1redos1veracode1almalinux1redhat29packetstorm1metasploit1zdt1rapid7blog1thn2hivepro1qualysblog5oracle5