home.social

#snakeyaml — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #snakeyaml, aggregated by home.social.

  1. Ron Bowes @[email protected] ·

    Before the holiday break, I started looking at CVE-2022-1471 in Confluence and Bitbucket, which led me to trying to understand how SnakeYAML deserialization vulnerabilities actually work. It was quite the ride, full of open source drama and a plethora of related vulns. I wrote it all up in this blog post:

    labs.greynoise.io/grimoire/202

    #vuln #vulnerability #poc #java #deserialization #snakeyaml #yaml

    #vuln #vulnerability #poc #java #deserialization #snakeyaml
  2. Brian Vermeer @[email protected] ·

    SnakeYaml 2.0: Solving the unsafe deserialization vulnerability t.co/Lo5o8SA8e8
    #java #security #snakeyaml #deserialization t.co/HUFugtXp5g

    #java #security #snakeyaml #deserialization