Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HummerCloud HummerRisk 安全漏洞
Vulnerability Description
HummerCloud HummerRisk是中国瀚马科技（HummerCloud）公司的一个开源的云原生安全平台，以非侵入的方式解决云原生环境的安全和治理问题，核心能力包括混合云的安全治理和云原生安全检测。 HummerCloud HummerRisk v1.5.0及之前版本存在安全漏洞，该漏洞源于使用存在漏洞的Snakeyaml组件，可能导致远程代码执行和服务器接管。
CVSS Information
N/A
Vulnerability Type
N/A