CVE-2018-19531

2018-11-2602:29:00

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.8%

JSON

HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncoder unsafely when configured without an xml.codec= setting.

CPENameOperatorVersion
httleq1.0.8
httleq1.0.1
httleq1.0.3
httleq1.0.0
httleq1.0.5
httleq1.0.4
httleq1.0.7
httleq1.0.2
httleq1.0.10
httleq1.0.6

Name	Operator	Version
httl	eq	1.0.8
httl	eq	1.0.1
httl	eq	1.0.3
httl	eq	1.0.0
httl	eq	1.0.5
httl	eq	1.0.4
httl	eq	1.0.7
httl	eq	1.0.2
httl	eq	1.0.10
httl	eq	1.0.6

Rows per page:

1-10 of 121

References

github.com/httl/httl/issues/224