CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2018/12/17 7:29 p.m.•14 views

CVE-2018-20133

ymlref allows code injection...

9.8CVSS9.7AI score0.01818EPSS

Exploits1References1

CVE•added 2018/12/17 6:0 p.m.•57 views

CVE-2018-20133

CVE-2018-20133 concerns the ymlref library, where the vulnerability is a code injection flaw. The connected advisories specify that ymlref versions up to 0.1.1 are susceptible to code injection when loading YAML documents and resolving JSON-pointer references. The CVSS data in the initial entry i...

9.8CVSS9.7AI score0.01818EPSS

Exploits1References1Affected Software1