In short
- CVE-2023-24621 is a HIGH (CVSS 7.8) vulnerability affecting com.esotericsoftware.yamlbeans:yamlbeans, yamlbeans (esotericsoftware).
- Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.4% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.
NVD description
An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.
More vulnerabilities in com.esotericsoftware.yamlbeans:yamlbeans
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free