Vulnerabilities > CVE-2020-8441 - Deserialization of Untrusted Data vulnerability in Jyaml Project Jyaml
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 |