Количество 9
Количество 9
BDU:2020-05622
Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат Xstream, существующая из-за непринятия мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольный код
CVE-2020-26217
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.
CVE-2020-26217
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.
CVE-2020-26217
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.
CVE-2020-26217
XStream before version 1.4.14 is vulnerable to Remote Code Execution.T ...
GHSA-mw36-7c6c-q4q2
XStream can be used for Remote Code Execution
ELSA-2021-0162
ELSA-2021-0162: xstream security update (IMPORTANT)
openSUSE-SU-2021:0140-1
Security update for xstream
SUSE-SU-2021:0176-1
Security update for xstream
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-05622 Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат Xstream, существующая из-за непринятия мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольный код | CVSS3: 8 | 85% Высокий | больше 5 лет назад |
 | CVE-2020-26217 XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14. | CVSS3: 8 | 85% Высокий | больше 5 лет назад |
 | CVE-2020-26217 XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14. | CVSS3: 9 | 85% Высокий | больше 5 лет назад |
 | CVE-2020-26217 XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14. | CVSS3: 8 | 85% Высокий | больше 5 лет назад |
| CVE-2020-26217 XStream before version 1.4.14 is vulnerable to Remote Code Execution.T ... | CVSS3: 8 | 85% Высокий | больше 5 лет назад |
| GHSA-mw36-7c6c-q4q2 XStream can be used for Remote Code Execution | CVSS3: 8 | 85% Высокий | больше 5 лет назад |
| ELSA-2021-0162 ELSA-2021-0162: xstream security update (IMPORTANT) | 85% Высокий | больше 5 лет назад | |
 | openSUSE-SU-2021:0140-1 Security update for xstream | больше 5 лет назад | ||
| SUSE-SU-2021:0176-1 Security update for xstream | больше 5 лет назад |
Уязвимостей на страницу