Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7883
HistoryNov 26, 2018 - 7:52 a.m.

Remote Code Execution (RCE)

2018-11-2607:52:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.01 Low

EPSS

Percentile

83.8%

HTTL is vulnerable to remote code execution (RCE). The vulnerability is due to the unsafe use of XStream in the function decodeXml with xml.codec=httl.spi.codecs.XstreamCodec setting.

CPENameOperatorVersion
httlle1.0.12

0.01 Low

EPSS

Percentile

83.8%

Related for VERACODE:7883