← CVE Intelligence

CVE-2022-31605

NVIDIA / NVIDIA FLARE PUBLISHED

Description (CNA)

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Affected (CNA)

Vendor / productVersions
NVIDIA / NVIDIA FLAREaffected All versions prior to 2.1.2

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.