Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2020/11/16 8:07 p.m.•125 views

XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

9.3CVSS6.8AI score0.82717EPSS
SaveExploits7References17Affected Software1
osv_ghsa
osv_ghsa
•added 2020/11/16 8:07 p.m.•346 views

GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

8CVSS6.8AI score0.82717EPSS
SaveExploits7References17
Rows per page
Query Builder