Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•2 views

CVE-2025-63721: Deserialization of Untrusted Data

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...

8.8CVSS5.8AI score0.00492EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/08 12:00 a.m.•12 views

CVE-2025-63721

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...

9.8CVSS6.8AI score
SaveExploits0References4
Rows per page
Query Builder