CVE-2018-1051CWE-20

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()`…

published January 25, 2018

CVSS
—
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01311 · 70.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-01-25T20:00Z
EPSS history
Timeline
  • 25 JAN 20:00Z
    It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()`…
    cvelistv5