In short
- CVE-2020-8441 is a CRITICAL (CVSS 9.8) vulnerability affecting org.jyaml:jyaml, jyaml (jyaml project).
- Chance of exploitation in the next 30 days (EPSS): 5.0%, higher than 92.2% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.
NVD description
JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free