Archive

25 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /25 February 2018 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2018-1051

Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider

It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.

Red Hat RESTEasy resteasy org.jboss.resteasy:resteasy-yaml-provider Ubuntu Maven

Jan 25, 2018