SonicALERT
Search

Sonicwall Signatures

 

All Categories


  Malformed-yaml yaml.OT_2
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution.


Relevant Information