Description
IBM Aspera Faspex YAML反序列化漏洞(CVE-2022-47986)
IBM Aspera Faspex YAML反序列化漏洞(CVE-2022-47986)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-47986
https://www.ibm.com/support/pages/security-bulletin-ibm-aspera-faspex-442-pl2-has-addressed-multiple-vulnerabilities-cve-2022-28330-cve-2023-22868-cve-2022-30556-cve-2022-31813-cve-2022-30522-cve-2022-47986-cve-2022-28615-cve-2022-26377-cve-2018-25032-cve-2022-2068-3
https://www.assetnote.io/resources/research/pre-auth-rce-in-aspera-faspex-case-guide-for-auditing-ruby-on-rails
https://www.securityweek.com/recently-patched-ibm-aspera-faspex-vulnerability-exploited-in-the-wild/
https://www.rapid7.com/blog/post/2023/03/28/etr-active-exploitation-of-ibm-aspera-faspex-cve-2022-47986/
https://avd.aliyun.com/detail?id=AVD-2022-47986
https://www.exploit-db.com/exploits/51316
https://github.com/mauricelambert/CVE-2022-47986
https://www.tenable.com/plugins/was/114275
https://zone.ci/aliyun/ali_nvd/40293.html