2 matches found
XStream can be used for Remote Code Execution
Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...
9.3CVSS0.7AI score0.85001EPSS
SaveExploits7References17Affected Software1
GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution
Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...
8CVSS9.1AI score0.85001EPSS
SaveExploits7References17
20