(CVE-2023-2251) GitHub eemeli/yaml 输入验证漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/advisories/GHSA-f9xv-q969-pqx4
• https://nvd.nist.gov/vuln/detail/CVE-2023-2251
• https://www.miggo.io/vulnerability-database/cve/CVE-2023-2251
• https://github.com/eemeli/yaml
• https://security.snyk.io/vuln/SNYK-JS-YAML-5458867
• https://www.resolvedsecurity.com/vulnerability-catalog/CVE-2023-2251
• https://security.alpinelinux.org/vuln/CVE-2023-2251

Related Vulnerabilities

• PoCCVE-2024-9487: GitHub Enterprise - SAML Authentication Bypass
• PoCCVE-2018-1000600: Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
• PoCCVE-2024-0200: Github Enterprise - Remote Code Execution
• PoCCVE-2025-53624: Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure
• PoCgithub-gist-csp-bypass: Content-Security-Policy Bypass - GitHub Gist
• PoCgithub-app-token: Github App Token
• PoCgithub-oauth-token: Github OAuth Access Token
• PoCgithub-personal-token: Github Personal Token
• PoCgithub-refresh-token: Github Refresh Token
• PoCgithub-login-check: Github Login Check
• PoCappspec-yml-disclosure: Appspec YML/YAML - Detect
• PoCgithub-workflows-disclosure: Github Workflow Disclosure
• PoCgitlab-ci-yml: GitLab CI YAML - Exposure