Hummerrisk
1 CVEs
product
Monthly
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
Deserialization
Hummerrisk
NVD
GitHub
CVSS 3.1
8.8
EPSS
0.1%
EPSS 0%
CVSS 8.8
HIGH
POC
This Week
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
Deserialization
Hummerrisk
NVD
GitHub