xmlrpc-common-deserialization

xmlrpc-common deserialization vulnerability This note is a technical note to detail the root cause and the associated exploit. You can find the initial disclosure here. The associated CVE is CVE-2019-17570. Description xmlrpc-common forms a shared code base between xmlrpc-client and xmlrpc-server...

ae.teletronics.ejabberd:ejabberdxmlrpcclient (>=1.0.2, <=1.1.0), br.eti.kinoshita:testlink-java-api (>=1.9.0-1, <=1.9.20-1) +281 more potentially affected by CVE-2016-5004 via org.apache.xmlrpc:xmlrpc-common (>=3.0b1, <=3.1.3)

org.apache.xmlrpc:xmlrpc-common MAVEN version =3.0b1, =1.0.2, =1.9.0-1, =0.0.1, =0.0.1, =2.6.1.19, =8.1.0.286, =8.1.0.286, =8.1.0.286, =1.0.0.release, =0.5, =0.5, =0.7, =0.9 and more Source cves: CVE-2016-5004 Source advisory: OSV:GHSA-R2PG-W96P-PCPJ...

ae.teletronics.ejabberd:ejabberdxmlrpcclient (>=1.0.2, <=1.1.0), br.eti.kinoshita:testlink-java-api (>=1.9.0-1, <=1.9.20-1) +281 more potentially affected by CVE-2016-5004 via org.apache.xmlrpc:xmlrpc-common (>=3.0b1, <=3.1.3)

org.apache.xmlrpc:xmlrpc-common MAVEN version =3.0b1, =1.0.2, =1.9.0-1, =0.0.1, =0.0.1, =2.6.1.19, =8.1.0.286, =8.1.0.286, =8.1.0.286, =1.0.0.release, =0.5, =0.5, =0.7, =0.9 and more Source cves: CVE-2016-5004 Source advisory: GHSA-R2PG-W96P-PCPJ...