Lucene search
CVE-2020-26258
XStream Java library vulnerability in unmarshalling proces
Show more
| Reporter | Title | Published | Views | Family All 153 |
|---|---|---|---|---|
 | Server-Side Forgery Request can be activated unmarshalling with XStream | 21 Dec 202016:28 | – | github |
| Command Injection in Xstream | 29 May 201918:05 | – | github |
| Deserialization of Untrusted Data in Jenkins | 13 May 202201:36 | – | github |
| XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling | 21 Dec 202016:28 | – | github |
| Deserialization of Untrusted Data and Code Injection in xstream | 26 Jul 201916:09 | – | github |
| XStream can be used for Remote Code Execution | 16 Nov 202020:07 | – | github |
 | Server-Side Forgery Request can be activated unmarshalling with XStream | 21 Dec 202016:28 | – | osv |
| Command Injection in Xstream | 29 May 201918:05 | – | osv |
| CVE-2020-26258 | 16 Dec 202001:15 | – | osv |
| Deserialization of Untrusted Data in Jenkins | 13 May 202201:36 | – | osv |
10
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo17 Dec 2020 20:48Current
0.5Low risk
Vulners AI Score0.5
CVSS27.5
CVSS39.8
EPSS0.911