Lucene search
GoogleOSV:CVE-2023-31890HistoryMay 16, 2023 - 4:15 p.m.
CVE-2023-31890
2023-05-1616:15:10
Google
osv.dev
1
xml deserialization
glazedlists v1.11.0
code execution
beanxmlbytecoder.decode()
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
Related
cve
cve
CVE-2023-31890
2023-05-16 16:15:10
redhatcve
redhatcve
CVE-2023-31890
2023-06-06 20:25:35
nvd
nvd
CVE-2023-31890
2023-05-16 16:15:10
veracode
veracode
Arbitrary Code Execution
2023-05-18 01:40:16
github
github
glazedlists XML Deserialization vulnerability
2023-05-16 18:30:15
prion
prion
Deserialization of untrusted data
2023-05-16 16:15:00
osv
osv
glazedlists XML Deserialization vulnerability
2023-05-16 18:30:15
cvelist
cvelist
CVE-2023-31890
2023-05-16 00:00:00