{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2022-1471", "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778", "state": "PUBLISHED", "assignerShortName": "Google", "requesterUserId": "ed9b5bb2-2df1-4aa3-9791-5fb260d88e62", "dateReserved": "2022-04-26T08:32:53.188Z", "datePublished": "2022-12-01T10:47:07.203Z", "dateUpdated": "2023-04-25T16:48:44.288Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SnakeYAML", "vendor": "SnakeYAML", "versions": [{"lessThanOrEqual": "2.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.</span></span><br>"}], "value": "SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.\u00a0Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.\n"}], "impacts": [{"capecId": "CAPEC-253", "descriptions": [{"lang": "en", "value": "CAPEC-253 Remote Code Inclusion"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "14ed7db2-1595-443d-9d34-6215bf890778", "shortName": "Google", "dateUpdated": "2023-04-25T16:48:44.288Z"}, "references": [{"url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2"}, {"url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479"}, {"url": "https://github.com/mbechler/marshalsec"}, {"url": "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc"}, {"url": "https://security.netapp.com/advisory/ntap-20230818-0015/"}, {"url": "http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html"}, {"url": "http://www.openwall.com/lists/oss-security/2023/11/19/1"}, {"url": "https://security.netapp.com/advisory/ntap-20240621-0006/"}], "source": {"discovery": "UNKNOWN"}, "title": "Remote Code execution in SnakeYAML", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:*", "matchCriteriaId": "3598DC3A-DDD1-4A0B-ACDA-406B85A1EA1A", "versionEndExcluding": "2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.\u00a0Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.\n"}, {"lang": "es", "value": "La clase Constructor() de SnakeYaml no restringe los tipos de los que se pueden crear instancias durante la deserializaci\u00f3n. La deserializaci\u00f3n del contenido yaml proporcionado por un atacante puede conducir a la ejecuci\u00f3n remota de c\u00f3digo. Recomendamos utilizar SafeConsturctor de SnakeYaml al analizar contenido que no es de confianza para restringir la deserializaci\u00f3n. Recomendamos actualizar a la versi\u00f3n 2.0 y posteriores."}], "id": "CVE-2022-1471", "lastModified": "2024-06-21T19:15:21.740", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.5, "source": "cve-coordination@google.com", "type": "Secondary"}]}, "published": "2022-12-01T11:15:10.553", "references": [{"source": "cve-coordination@google.com", "url": "http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html"}, {"source": "cve-coordination@google.com", "url": "http://www.openwall.com/lists/oss-security/2023/11/19/1"}, {"source": "cve-coordination@google.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479"}, {"source": "cve-coordination@google.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2"}, {"source": "cve-coordination@google.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/mbechler/marshalsec"}, {"source": "cve-coordination@google.com", "url": "https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc"}, {"source": "cve-coordination@google.com", "url": "https://security.netapp.com/advisory/ntap-20230818-0015/"}, {"source": "cve-coordination@google.com", "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"}, {"source": "cve-coordination@google.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"}], "sourceIdentifier": "cve-coordination@google.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "cve-coordination@google.com", "type": "Secondary"}]}

{}