yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. POST...

yaml-payload

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...

snakeyaml_cve_poc

snakeyamlcvepoc SnakeYAML-CVE-2022-1471-POC build Either build the jar on your host with mvn clean compile assembly:single Or use docker to build an image with docker build -t snakeyaml . run Run the container with docker run --rm -p8080:8080 snakeyaml or the jar if you built on your host with ja...

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Code for veracode blog To demonstrate the Code Execution, 1. Build the project using maven 2. Execute python3 -m http.server 8080 to run the http server 3. Run exploit.java. You should observe a HTTP GET request on the server 4. To demonstrate how SnakeYAML 2.0 prevent...

cve-2022-1471-jira-lab

CVE-2022-1471 — SnakeYAML RCE lab Jira / Automation for Jira context Offline, self-contained lab proving the mechanism behind CVE-2022-1471 SnakeYAML unsafe deserialization → RCE, CVSS 9.8, as used in the Jira / Jira Service Management finding against a host running 9.4.9 affected range...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

ROOT-APP-MAVEN-CVE-2022-1471 CVE-2022-1471 in org.yaml:snakeyaml - Patched by Root

Root has patched CVE-2022-1471 in the org.yaml:snakeyaml package for Root:Maven. Multiple fixed versions available...

Astra Linux – Vulnerability in snakeyaml

Those who use Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser runs on user-supplied input, an attacker may provide content that causes the parser to crash due to a stack overflow. This vulnerability could potentially allow for a Denial of...

RHLW-2026-C7695B3B26607B57 Lightwell Security Advisory: snakeyaml 1.30.0.rhlw-00013

Red Hat Lightwell has released org.yaml:snakeyaml 1.30.0.rhlw-00013 with backported fixes for CVE-2022-38750, CVE-2022-38751, CVE-2022-38752, and CVE-2022-41854. CVE-2022-38750: DoS in SnakeYAML CVE-2022-38751: DoS in SnakeYAML CVE-2022-38752: DoS in SnakeYAML CVE-2022-41854: Stack Overflow in...

RHLW-2026-DB6CFA79167EC456 Lightwell Security Advisory: snakeyaml 1.33.0.rhlw-00001

Red Hat Lightwell has released org.yaml:snakeyaml 1.33.0.rhlw-00001 with a backported security fix. CVE-2022-1471: Remote Code execution in SnakeYAML This patched artifact is a drop-in replacement for org.yaml:snakeyaml 1.33.0 from Maven Central...

RHLW-2026-C782A5BB98E3A176 Lightwell Security Advisory: snakeyaml 1.29.0.rhlw-00021

Red Hat Lightwell has released org.yaml:snakeyaml 1.29.0.rhlw-00021 with backported fixes for CVE-2022-1471, CVE-2022-25857, CVE-2022-38749, CVE-2022-38750, CVE-2022-38751, CVE-2022-38752, and CVE-2022-41854. CVE-2022-1471: Remote Code execution in SnakeYAML CVE-2022-25857: Denial of Service DoS...

CLEANSTART-2026-CU41868 Alias feature in SnakeYAML before 1

Security vulnerability affects the apache-hive package. The Alias feature in SnakeYAML before 1...

CLEANSTART-2026-QZ30630 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-YW99186 Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-UI28748 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-PD76449 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-UF90267 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-LU07367 SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization

Security vulnerability affects the apache-hive package. SnakeYaml's Constructor class does not restrict types which can be instantiated during deserialization...