CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25857

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.0%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2022-25857

Snakeyaml Project » Snakeyaml » Version: N/A

cpe:2.3:a:snakeyaml_project:snakeyaml:-
Snakeyaml Project » Snakeyaml » Version: 1.1

cpe:2.3:a:snakeyaml_project:snakeyaml:1.1
Snakeyaml Project » Snakeyaml » Version: 1.10

cpe:2.3:a:snakeyaml_project:snakeyaml:1.10
Snakeyaml Project » Snakeyaml » Version: 1.11

cpe:2.3:a:snakeyaml_project:snakeyaml:1.11
Snakeyaml Project » Snakeyaml » Version: 1.12

cpe:2.3:a:snakeyaml_project:snakeyaml:1.12
Snakeyaml Project » Snakeyaml » Version: 1.13

cpe:2.3:a:snakeyaml_project:snakeyaml:1.13
Snakeyaml Project » Snakeyaml » Version: 1.14

cpe:2.3:a:snakeyaml_project:snakeyaml:1.14
Snakeyaml Project » Snakeyaml » Version: 1.15

cpe:2.3:a:snakeyaml_project:snakeyaml:1.15
Snakeyaml Project » Snakeyaml » Version: 1.16

cpe:2.3:a:snakeyaml_project:snakeyaml:1.16
Snakeyaml Project » Snakeyaml » Version: 1.17

cpe:2.3:a:snakeyaml_project:snakeyaml:1.17
Snakeyaml Project » Snakeyaml » Version: 1.18

cpe:2.3:a:snakeyaml_project:snakeyaml:1.18
Snakeyaml Project » Snakeyaml » Version: 1.19

cpe:2.3:a:snakeyaml_project:snakeyaml:1.19
Snakeyaml Project » Snakeyaml » Version: 1.2

cpe:2.3:a:snakeyaml_project:snakeyaml:1.2
Snakeyaml Project » Snakeyaml » Version: 1.20

cpe:2.3:a:snakeyaml_project:snakeyaml:1.20
Snakeyaml Project » Snakeyaml » Version: 1.21

cpe:2.3:a:snakeyaml_project:snakeyaml:1.21
Snakeyaml Project » Snakeyaml » Version: 1.22

cpe:2.3:a:snakeyaml_project:snakeyaml:1.22
Snakeyaml Project » Snakeyaml » Version: 1.23

cpe:2.3:a:snakeyaml_project:snakeyaml:1.23
Snakeyaml Project » Snakeyaml » Version: 1.24

cpe:2.3:a:snakeyaml_project:snakeyaml:1.24
Snakeyaml Project » Snakeyaml » Version: 1.25

cpe:2.3:a:snakeyaml_project:snakeyaml:1.25
Snakeyaml Project » Snakeyaml » Version: 1.26

cpe:2.3:a:snakeyaml_project:snakeyaml:1.26
Snakeyaml Project » Snakeyaml » Version: 1.27

cpe:2.3:a:snakeyaml_project:snakeyaml:1.27
Snakeyaml Project » Snakeyaml » Version: 1.28

cpe:2.3:a:snakeyaml_project:snakeyaml:1.28
Snakeyaml Project » Snakeyaml » Version: 1.29

cpe:2.3:a:snakeyaml_project:snakeyaml:1.29
Snakeyaml Project » Snakeyaml » Version: 1.3

cpe:2.3:a:snakeyaml_project:snakeyaml:1.3
Snakeyaml Project » Snakeyaml » Version: 1.30

cpe:2.3:a:snakeyaml_project:snakeyaml:1.30
Snakeyaml Project » Snakeyaml » Version: 1.4

cpe:2.3:a:snakeyaml_project:snakeyaml:1.4
Snakeyaml Project » Snakeyaml » Version: 1.5

cpe:2.3:a:snakeyaml_project:snakeyaml:1.5
Snakeyaml Project » Snakeyaml » Version: 1.6

cpe:2.3:a:snakeyaml_project:snakeyaml:1.6
Snakeyaml Project » Snakeyaml » Version: 1.7

cpe:2.3:a:snakeyaml_project:snakeyaml:1.7
Snakeyaml Project » Snakeyaml » Version: 1.8

cpe:2.3:a:snakeyaml_project:snakeyaml:1.8
Snakeyaml Project » Snakeyaml » Version: 1.9

cpe:2.3:a:snakeyaml_project:snakeyaml:1.9
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25857

Products

Pricing

Contact Us