Remote Code Execution (RCE)

org.apache.helix:helix-core and org.apache.helix:helix-rest are vulnerable to Remote Code Execution RCE. The vulnerable SnakeYAML component could be used by an attacker to deserialize Java.net.URLClassLoader and instruct it to load a JAR from a certain URL before deserializing...