Lucene search
Veracode Vulnerability DatabaseVERACODE:7601HistoryOct 12, 2018 - 2:29 a.m.
Remote Code Execution (RCE)
2018-10-1202:29:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
69.9%
pippo-xstream is vulnerable to remote code execution. The XstreamEngine component does not validate XML data before unmarshalling, which may lead to arbitrary code execution via a command to java.lang.ProcessBuilder when using XML data containing malicious types.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pippo xstream | le | 0.8.0 | |
| pippo xstream | le | 1.11.0 |
References
Related
prion
prion
Remote code execution
2018-10-11 07:29:00
osv
osv
Pippo RCE Vulnerability
2022-05-13 01:19:33
CVE-2018-18240
2018-10-11 07:29:00
cvelist
cvelist
CVE-2018-18240
2022-10-03 16:22:04
nvd
nvd
CVE-2018-18240
2018-10-11 07:29:00
github
github
Pippo RCE Vulnerability
2022-05-13 01:19:33
cve
cve
CVE-2018-18240
2022-10-03 16:22:04