writeups.xyz / Panic!! At the YAML

Submitter : c2a

Date: 3 January 2024

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• SnakeYAML

Authors :

• Ron Bowes (@Iagox86)

Link :
https://www.labs.greynoise.io/grimoire/2024-01-03-snakeyaml-deserialization/