NEWS T3 24 SECURITY NEWS. IBM Sterling Partner Engagement Manager is vulnerable to cross-site scripting

CVEID: CVE-2022-38749
Description: SnakeYAML is vulnerable to a denial of service, caused by a stack-overflow in parsing YAML files. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to cause the application to crash.
CWE: Click here.
CVSS Source:CVE.org
CVSS Base score: 3.3
CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)