snakeyaml_cve_poc

snakeyamlcvepoc SnakeYAML-CVE-2022-1471-POC build Either build the jar on your host with mvn clean compile assembly:single Or use docker to build an image with docker build -t snakeyaml . run Run the container with docker run --rm -p8080:8080 snakeyaml or the jar if you built on your host with ja...

yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...

cve-2022-1471-jira-lab

CVE-2022-1471 — SnakeYAML RCE lab Jira / Automation for Jira context Offline, self-contained lab proving the mechanism behind CVE-2022-1471 SnakeYAML unsafe deserialization → RCE, CVSS 9.8, as used in the Jira / Jira Service Management finding against a host running 9.4.9 affected range...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. POST...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Code for veracode blog To demonstrate the Code Execution, 1. Build the project using maven 2. Execute python3 -m http.server 8080 to run the http server 3. Run exploit.java. You should observe a HTTP GET request on the server 4. To demonstrate how SnakeYAML 2.0 prevent...

yaml-payload

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

CLEANSTART-2026-UF90267 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-YW99186 Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-PD76449 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-CU41868 Alias feature in SnakeYAML before 1

Security vulnerability affects the apache-hive package. The Alias feature in SnakeYAML before 1...

CLEANSTART-2026-UI28748 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-QZ30630 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-LU07367 SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization

Security vulnerability affects the apache-hive package. SnakeYaml's Constructor class does not restrict types which can be instantiated during deserialization...

Astra Linux – Vulnerability in snakeyaml

Those who use Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser runs on user-supplied input, an attacker may provide content that causes the parser to crash due to a stack overflow. This vulnerability could potentially allow for a Denial of...

Rocky Linux 8 [CIQ] Security Update: prometheus-jmx-exporter (crlsa-2020_4807)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20204807 advisory. snakeyaml: Billion laughs attack via alias feature CVE-2017-18640 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 8 [CIQ] Security Update: prometheus-jmx-exporter / prometheus-jmx-exporter-openjdk11 / etc (crlsa-2022_6820)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226820 advisory. snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-25857 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: prometheus-jmx-exporter / prometheus-jmx-exporter-openjdk11 / etc (crlsa-2022_9058)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20229058 advisory. SnakeYaml: Constructor Deserialization Remote Code Execution CVE-2022-1471 Tenable has extracted the preceding description block directly from the CIQ security...

Security Bulletin: Vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer. Vulnerabilities include a crafted Host header that is only a superstring match for a configured host+path key can still route a...