Details
-
Work Item
-
Status: Done
-
Major
-
Resolution: Fixed
-
None
-
None
-
GreenHopper Ranking:0|i2j1qz:
-
9223372036854775807
Description
Denial Of Service (DoS) in Talend/cloud-components (master)
Issue Details
- Vulnerability: Denial Of Service (DoS)
- Severity: Medium
- Project: Talend/cloud-components
- Branch: master
- Scan Date: Unknown
Issue Description
snakeyaml is vulnerable to denial of service. The vulnerability exists because the `Composer` function of `Composer.java` does not properly restrict the nested depth limitation for collections, allowing an attacker to crash the application.