136 matches found
apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.apache.commons.configuration2.AbstractYAMLBasedConfiguration.lambda$parseCol
Detailed Report: https://oss-fuzz.com/testcase?key=4997815570399232 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in java.base/java.util.regex.Pattern$GroupHead.match
Detailed Report: https://oss-fuzz.com/testcase?key=5022621716054016 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.apache.commons.configuration2.AbstractYAMLBasedConfiguration.parseCollection
Detailed Report: https://oss-fuzz.com/testcase?key=5001364155006976 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
Remote code execution
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995
CVE-2022-28995 affects Rengine v1.0.2. The vulnerability enables remote code execution via the YAML configuration function. The issue is confirmed across multiple sources (NVD, Red Hat, OSV, etc.). Practical impact is remote code execution with network access and no authentication required, as de...
CVE-2022-28995
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
CVE-2022-28995: Undefined Security Weakness
Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...
PYSEC-2021-848
Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...
PYSEC-2021-848
Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...
Crafter CMS Code Execution Vulnerability
Crafter CMS is an open source content management system CMS for digital experience applications.A code execution vulnerability exists in Crafter CMS, which stems from a web-based system or product that does not properly authenticate incoming data. An authenticated attacker could modify the main...
CVE-2021-23262
Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE...
Security feature bypass
Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE...
Crafter CMS 安全漏洞
Crafter CMS is an open source content management system CMS for digital experience applications.A code execution vulnerability exists in Crafter CMS, which stems from a web-based system or product that does not properly authenticate incoming data. An authenticated attacker could modify the main...
PT-2021-15422
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue allows authenticated administrators to modify the main YAML configuration file, which can lead to loading a Java class and resulting in remote...
CVE-2021-23262: Improper Control of Dynamically-Managed Code Resources
Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE...