HummerRisk SnakeYAML Component Vulnerability Leading to Remote Code Execution

A remote code execution vulnerability has been identified in HummerRisk versions through 1.5.0. The issue arises from the use of a vulnerable SnakeYAML component, which allows attackers to execute arbitrary code and potentially take over the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where HummerRisk is running.

Reproduction

To reproduce this vulnerability, install and start HummerRisk. Log in as an admin user. Once logged in, create a normal user account. After creating the account, log in as the newly created user. Access the API documentation, which is available to normal users. Use the file writing feature to upload a payload, which can be executed by overwriting the /etc/crontab file, leading to remote code execution.