Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Google

Published: 2022-09-05T00:00:00

Updated: 2024-08-03T11:02:14.576Z

Reserved: 2022-08-25T00:00:00

Link: CVE-2022-38751

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-05T10:15:09.793

Modified: 2024-03-15T11:15:08.107

Link: CVE-2022-38751

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-09-05T00:00:00Z

Links: CVE-2022-38751 - Bugzilla