2 matches found
CVE-2020-8441
JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load function. NOTE: this is a discontinued product...
9.9AI score0.04962EPSS
SaveExploits1References5
CVE-2020-8441
CVE-2020-8441 is tied to the JYaml library (up to version 1.3). The issue arises from unsafe deserialization in the library’s load() function, allowing remote code execution when presented with a malicious payload. The description explicitly notes this is a discontinued product, and connected rec...
9.8CVSS9.8AI score0.04962EPSS
SaveExploits1References5Affected Software1
20