Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2020/11/16 8:7 p.m.110 views

XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

9.3CVSS0.7AI score0.85001EPSS
SaveExploits7References17Affected Software1
OSV
OSV
added 2020/11/16 8:7 p.m.304 views

GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

8CVSS9.1AI score0.85001EPSS
SaveExploits7References17
Rows per page
Query Builder