Andrey Somov

3 exploits Active since Dec 2019
CVE-2017-18640 NOMISEC HIGH WORKING POC
SnakeYAML <1.26 - Entity Expansion
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
CVSS 7.5
CVE-2017-18640 NOMISEC HIGH WORKING POC
SnakeYAML <1.26 - Entity Expansion
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
CVSS 7.5
CVE-2022-25857 WRITEUP HIGH WRITEUP
Snakeyaml < 1.31 - XML Entity Expansion
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
CVSS 7.5