Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2020/11/16 8:07 p.m.•121 views

XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

9.3CVSS6.8AI score0.85001EPSS
SaveExploits7References17Affected Software1
OSV
OSV
•added 2020/11/16 8:07 p.m.•331 views

GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

8CVSS6.8AI score0.85001EPSS
SaveExploits7References17
Rows per page
Query Builder