CVE-2021-21341

CVE-2021-21341 XStream DoS XStream Official Announcement CVE-2021-21341 Vulnerability CVE-2021-21341: XStream can cause a Denial of Service. Affected Versions All versions until and including version 1.4.15 are affected, if using the version out of the box. No user is affected, who followed the...

Remote Code Execution (RCE)

org.apache.eventmesh:eventmesh-connector-rabbitmq is vulnerable to Remote Code Execution RCE. The vulnerability is due to blindly reading a ByteArrayInputStream without sanitization in getFromByteArray, which allows an attacker to execute malicious code on the system via rabbitmq messages...

XStream code issue vulnerabilities

XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can easily be converted to each other . XStream has a denial-of-service vulnerability that can be exploited by an attacker to manipulate a processed input stream and replac...