Bolo-Solo SnakeYAML Deserialization Vulnerability in BackupService.java

A deserialization vulnerability has been identified in Bolo-Solo versions through 2.6.4. This issue arises in the 'importMarkdownsSync' function within 'BackupService.java', where the SnakeYAML library is used to process YAML metadata from Markdown files. The vulnerability allows remote attackers to execute arbitrary code on the server by crafting import files with malicious YAML payloads, exploiting the lack of security checks during deserialization.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server, with the potential for complete control over the affected system.

Reproduction

To reproduce this vulnerability, upload a Markdown file containing a crafted YAML payload that exploits the deserialization flaw into the 'import/markdown' interface of Bolo-Solo. The payload should be designed to execute arbitrary code when the Markdown import is processed.