Code Security Finding

This finding was first detected on 2024-02-07 06:59pm GMT and is still present in the last scan performed on 2024-02-07 06:58pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
High	Deserialization of Untrusted Data	CWE-502	Rce.java:114	1
Vulnerable Code java-sec-code/src/main/java/org/joychou/controller/Rce.java Lines 109 to 114 in 5c68d09 * @param content payloads */ @GetMapping("/vuln/yarm") public void yarm(String content) { Yaml y = new Yaml(); y.load(content); 1 Data Flow/s detected Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Deserialization of Untrusted Data Training ● Videos    ▪ Secure Code Warrior Deserialization of Untrusted Data Video ● Further Reading    ▪ OWASP Deserialization Cheat Sheet    ▪ OWASP Top Ten 2017 A8: Insecure Deserialization    ▪ OWASP Deserialization of untrusted data 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk