VulnerabilityModified

CVE-2020-1947

SnakeYAML allows to unmarshal data to a Java type By using the YAML tag.

CRITICAL 9.8EPSS 33.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 33.9%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 33.92% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-502
Affected: apache/shardingsphere
Source: security@apache.org

References

https://lists.apache.org/thread.html/r4a61a24c119bd820da6fb02100d286f8aae55c8f9b94a346b9bb27d8%40%3Cdev.shardingsphere.apache.org%3EVendor Advisory
https://lists.apache.org/thread.html/r4a61a24c119bd820da6fb02100d286f8aae55c8f9b94a346b9bb27d8%40%3Cdev.shardingsphere.apache.org%3EVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.