Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:36095
HistoryJun 23, 2022 - 11:01 a.m.

Deserialization Of Untrusted Data

2022-06-2311:01:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.003 Low

EPSS

Percentile

70.1%

JSON

nvflare is vulnerable to deserialization of untrusted data. The vulnerability exists because the yaml files are not loaded safely which allows an attacker to execute codes and cause an application crash.

CPENameOperatorVersion
nvflarele2.1.1
nvflarele2.1.1

Related

osv 3
prion 1
cvelist 1
nvd 1
cve 1
github 1
osv
osv
PYSEC-2022-232
2022-07-01 18:15:00
CVE-2022-31605
2022-07-01 18:15:08
Unsafe yaml deserialization in NVFlare
2022-06-22 21:22:46
prion
prion
Deserialization of untrusted data
2022-07-01 18:15:00
cvelist
cvelist
CVE-2022-31605
2022-07-01 17:15:22
nvd
nvd
CVE-2022-31605
2022-07-01 18:15:08
cve
cve
CVE-2022-31605
2022-07-01 18:15:08
github
github
Unsafe yaml deserialization in NVFlare
2022-06-22 21:22:46

0.003 Low

EPSS

Percentile

70.1%

JSON
Related for VERACODE:36095
osv3prion1cvelist1nvd1cve1github1