Description
An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component.
Remediation
References
https://github.com/nacos-group/nacos-spring-project/issues/314
Related Vulnerabilities
CVE-2017-16220 Vulnerability in npm package wind-mvc
CVE-2020-20913 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2019-15609 Vulnerability in npm package kill-port-process
CVE-2014-9772 Vulnerability in npm package validator
CVE-2019-0230 Vulnerability in maven package org.apache.struts:struts2-core