CVE-2022-31691

CRITICAL

Vmware Bosh Editor < 1.40.0 - Code Injection

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-31691. PoCs published by blipzip.

AI-analyzed exploit summary This repository contains a detailed write-up analyzing CVE-2022-31691, a remote code execution vulnerability in Spring Tool Suite (STS) due to unsafe YAML deserialization using SnakeYaml. The author discusses the vulnerability's background, exploitation steps, and the patch applied in STS 4.16.1.

Description

Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain circumstances allows for potentially harmful remote code execution by the attacker.

Exploits (1)

nomisec WRITEUP 1 stars
by blipzip · poc
https://github.com/blipzip/CVE-2022-31691

This repository contains a detailed write-up analyzing CVE-2022-31691, a remote code execution vulnerability in Spring Tool Suite (STS) due to unsafe YAML deserialization using SnakeYaml. The author discusses the vulnerability's background, exploitation steps, and the patch applied in STS 4.16.1.

Classification
Writeup 90%
Attack Type
Deserialization
Complexity
Moderate
Reliability
Theoretical
Target: Spring Tool Suite (STS) for Eclipse < 4.16.1
No auth needed
Prerequisites: Access to a vulnerable STS instance · Ability to provide a malicious YAML file · CloudFoundry configuration (unconfirmed)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0239
EPSS Percentile 81.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-94
Status published
Products (5)
vmware/bosh_editor 1.0.0 - 1.40.0
vmware/cloudfoundry_manifest_yml_support 1.0.0 - 1.40.0
vmware/concourse_ci_pipeline_editor 1.0.0 - 1.40.0
vmware/spring_boot_tools 1.0.0 - 1.40.0
vmware/spring_tools 4.0.0 - 4.16.1
Published Nov 04, 2022
Tracked Since Feb 18, 2026