CVE-2023-24621 | BDVDB-2026-210422 Detail

Description#

An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/EsotericSoftware
https://contrastsecurity.com
https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md

Exploit#

No public exploit known

History#

Version 12023-08-25Record published in the CVE List.
Version 22024-10-02Most recent update recorded in the CVE List.