CVE-2023-46302

Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 . Apache Submarine uses JAXRS to define REST endpoints. In order to handle YAML requests (using application/yaml content-type), it defines a YamlEntityProvider entity provider that will process all incoming YAML requests. In order to unmarshal the request, the readFrom method is invoked, passing the entityStream containing the user-supplied data in `submarine-server/server-core/src/main/java/org/apache/submarine/server/utils/YamlUtils.java`. We have now fixed this issue in the new version by replacing to `jackson-dataformat-yaml`. This issue affects Apache Submarine: from 0.7.0 before 0.8.0. Users are recommended to upgrade to version 0.8.0, which fixes this issue. If using the version smaller than 0.8.0 and not want to upgrade, you can try cherry-pick PR https://github.com/apache/submarine/pull/1054 and rebuild the submart-server image to fix this.

• CWE-502

• https://github.com/apache/submarine/pull/1054Issue Tracking, Patch
• https://issues.apache.org/jira/browse/SUBMARINE-1371Exploit, Issue Tracking
• https://lists.apache.org/thread/zf0wppzh239j4h131hm1dbswfnztxrr5Mailing List
• https://github.com/apache/submarine/pull/1054Issue Tracking, Patch
• https://issues.apache.org/jira/browse/SUBMARINE-1371Exploit, Issue Tracking
• https://lists.apache.org/thread/zf0wppzh239j4h131hm1dbswfnztxrr5Mailing List

Published

Nov 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46295An issue was discovered in Teledyne FLIR M300 2.00-19. Unaut…9.8
• CVE-2023-46297An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_…5.1
• CVE-2023-46298Next.js before 13.4.20-canary.13 lacks a cache-control heade…7.5
• CVE-2023-4630An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-46300iTerm2 before 3.4.20 allow (potentially remote) code executi…9.8
• CVE-2023-46301iTerm2 before 3.4.20 allow (potentially remote) code executi…9.8
• CVE-2023-46303link_to_local_path in ebooks/conversion/plugins/html_input.p…7.5
• CVE-2023-46304modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a…8.1
• CVE-2023-46306The web administration interface in NetModule Router Softwar…6.6
• CVE-2023-46307An issue was discovered in server.js in etcd-browser 87ae63d…7.5
• CVE-2023-46308In Plotly plotly.js before 2.25.2, plot API calls have a ris…9.8
• CVE-2023-46309Missing Authorization vulnerability in AdvancedCoding wpDisc…7.3