1 matches found
apache-commons-configuration: uncontrolled class instantiation when loading YAML files
A flaw was found in the Apache Commons Configuration, where it uses a third-party library to process YAML files, which by default, allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default...
10CVSS7.5AI score0.06849EPSS
SaveExploits0References6
20