Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Esoteric Software YamlBeans 代码问题漏洞
Vulnerability Description
YamlBeans是Esoteric Software开源的一个库。可以轻松地将 Java 对象图与 YAML。 Esoteric Software YamlBeans 1.15及之前版本存在安全漏洞，该漏洞源于允许对 Java 类进行不受信任的反序列化。
CVSS Information
N/A
Vulnerability Type
N/A