Esotericsoftware Yamlbeans
2 CVEs affecting Esotericsoftware Yamlbeans. Latest disclosed: 2023-08-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-24621 | High | 7.8 | 2023-08-25 | An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are contro… |
CVE-2023-24620 | Medium | 5.5 | 2023-08-25 | An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader… |