Aller au contenu
Se connecter
9.8 Critique

CVE-2022-31691 Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI…

Description

Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain circumstances allows for potentially harmful remote code execution by the attacker.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring by VMware Versions non publiées

Autres CVE de Spring by VMware

Les 2 CVE de Spring by VMware →
CVE-2022-31692 Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass… 9.8 Critique
Suivre cette CVE