[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvzqvt2ARuZm3eaqzsU_dOQEHhenf6DpHjbdDp95QGyY":3,"g5a-risk:CVE-2022-25857":134},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":32,"epssPercentile":25,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":46,"references":47,"referencesCount":76,"weaknesses":77,"weaknessesCount":86,"isActivelyExploited":87,"cisaInfo":25,"otxData":25,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":129,"notableEvents":130},"CVE-2022-25857","What is CVE-2022-25857?","The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.","2022-08-30T05:15:07.667","2024-03-15T11:15:07.75",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"report@snyk.io","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},0.02749,[32,32,32,32,32,32,32],"High",[36,41],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"snakeyaml_project","snakeyaml","*","cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",2,[48,54,59,63,68,72],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fbitbucket.org\u002Fsnakeyaml\u002Fsnakeyaml\u002Fcommits\u002Ffc300780da21f4bb92c148bc90257201220cf174","Bitbucket",[52,53],"Patch","Third Party Advisory",{"url":55,"source":50,"tags":56},"https:\u002F\u002Fbitbucket.org\u002Fsnakeyaml\u002Fsnakeyaml\u002Fissues\u002F525",[57,58,53],"Exploit","Issue Tracking",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fgithub.com\u002Fsnakeyaml\u002Fsnakeyaml\u002Fcommit\u002Ffc300780da21f4bb92c148bc90257201220cf174","GitHub",[52,53],{"url":64,"source":65,"tags":66},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F10\u002Fmsg00001.html","Debian",[67,53],"Mailing List",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240315-0010\u002F","Netapp",[],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-JAVA-ORGYAML-2806360","Snyk",[57,52,53],6,[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-776","Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","If the DTD contains a large number of nested or recursive entities, this can lead to explosive growth of data when parsed, causing a denial of service.","Draft","Base","Simple",1,false,[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2022-25857? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-25857, a high severity cyber security vulnerability from 2022. The package org.yaml:snakeyaml from 0 and before 1.31 are v...","CVE-2022-25857, CVE-2022-25857 vulnerability, CVE-2022-25857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, snakeyaml_project security, debian security, snakeyaml vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2022-25857",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":9,"dateModified":10,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-25857","Cybersecurity","CVE-2022-25857, CVE-2022-25857 vulnerability, CVE-2022-25857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115,123],{"Operator":25,"Negate":25,"Nodes":116},[117],{"Operator":118,"Negate":25,"CPEMatch":119},"OR",[120],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":121,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":122,"VersionEndIncluding":25},"4911A85B-287B-4900-8ACE-5BA60949D7BE","1.31",{"Operator":25,"Negate":25,"Nodes":124},[125],{"Operator":118,"Negate":25,"CPEMatch":126},[127],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":128,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":10,"cacheTime":132,"version":133},1792333428231,"2.0",{"score":135,"band":136,"action":137,"scoredAt":138},48,"Medium","Plan remediation","2026-10-16T06:55:33.69974+00:00"]