Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size, causing CPU and memory consumption, such as a Java Out-of-Memory exception.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
YamlBeans 代码问题漏洞
Vulnerability Description
YamlBeans是Esoteric Software开源的一个库。可以轻松地将 Java 对象图与 YAML。 Esoteric Software YamlBeans 1.15及之前版本存在安全漏洞，该漏洞源于精心设计的 YAML 文档能够针对 YamlBeans YamlReader 执行 XML 实体扩展攻击，利用YAML中的Anchor特性，可能会生成一个较小的YAML文档，当读取该文档时，该文档会扩展，从而导致CPU和内存消耗。
CVSS Information
N/A
Vulnerability Type
N/A