Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-1471

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

Published

2022-12-01T11:15:10.553

Last Modified

2025-06-18T09:15:47.243

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.3 (HIGH)

Weaknesses

Type: Secondary
CWE-20
Type: Primary
CWE-502

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	snakeyaml_project	snakeyaml	< 2.0	Yes

References

http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html ([email protected])
http://www.openwall.com/lists/oss-security/2023/11/19/1 ([email protected])
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479 Issue Tracking, Third Party Advisory ([email protected])
https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html ([email protected])
https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2 Exploit, Third Party Advisory ([email protected])
https://github.com/mbechler/marshalsec Exploit, Third Party Advisory ([email protected])
https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc ([email protected])
https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c ([email protected])
https://security.netapp.com/advisory/ntap-20230818-0015/ ([email protected])
https://security.netapp.com/advisory/ntap-20240621-0006/ ([email protected])
https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true Exploit, Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/11/19/1 (af854a3a-2127-422b-91ae-364da2661108)
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/mbechler/marshalsec Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230818-0015/ (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240621-0006/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)