Arbitrary Code Execution

com.glazedlists:glazedlists is vulnerable to Arbitrary Code Execution. The vulnerability exists in the decode method of BeanXMLByteCoder, which allows a remote attacker to inject and execute arbitrary code because the decode method parses the XML string without any checks, resulting in improper X...

glazedlists XML Deserialization vulnerability

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...