CVE-2023-24620

An issue was discovered in Esoteric YamlBeans through 1.15

published August 25, 2023

CVSS
—
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size, causing CPU and memory consumption, such as a Java Out-of-Memory exception.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.0th percentile
Published
2023-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    An issue was discovered in Esoteric YamlBeans through 1.15
    cvelistv5