Поиск уязвимостей
Количество 6
Количество 6
CVE-2017-7957
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.
CVE-2017-7957
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.
CVE-2017-7957
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.
CVE-2017-7957
XStream through 1.4.9, when a certain denyTypes workaround is not used ...
GHSA-7hwc-46rm-65jh
Denial of service in XStream
ALT-PU-2019-4251
ALT-PU-2019-4251: package `xstream` update to version 1.4.11.1-alt1_2jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2017-7957 XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call. | CVSS3: 7.5 | 5% Низкий | больше 9 лет назад | |
CVE-2017-7957 XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call. | CVSS3: 5.9 | 5% Низкий | больше 9 лет назад | |
CVE-2017-7957 XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call. | CVSS3: 7.5 | 5% Низкий | больше 9 лет назад | |
CVE-2017-7957 XStream through 1.4.9, when a certain denyTypes workaround is not used ... | CVSS3: 7.5 | 5% Низкий | больше 9 лет назад | |
GHSA-7hwc-46rm-65jh Denial of service in XStream | CVSS3: 7.5 | 5% Низкий | больше 6 лет назад | |
ALT-PU-2019-4251 ALT-PU-2019-4251: package `xstream` update to version 1.4.11.1-alt1_2jpp8 | CVSS3: 7.5 | 5% Низкий | больше 7 лет назад |
Уязвимостей на страницу