2 matches found
XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from internal resources that are not publicly...
7.7CVSS5.9AI score0.81817EPSS
SaveExploits4References4
UBUNTU-CVE-2020-26258
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from internal resources that are not publicly...
7.7CVSS7AI score0.81817EPSS
SaveExploits4References7
20