CVE-2023-28754

CVE-2023-28754 is a critical Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent versions through 5.3.2, allowing authenticated attackers to achieve arbitrary code execution. By modifying the Agent's YAML configuration file to include specially crafted SnakeYAML payloads, an attacker can force the ShardingSphere JVM process to load and execute malicious JAR files from a specified URL during startup. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.