1 matches found
Remote Code Execution
JYaml is vulnerable to remote code execution. The library allows unsafe deserialization via the load function, allowing an attacker to execute arbitrary code on the system using a malicious .yml file...