Количество 10
Количество 10
GHSA-7chv-rrw6-w6fc
XStream is vulnerable to a Remote Command Execution attack
CVE-2021-29505
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
CVE-2021-29505
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
CVE-2021-29505
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
CVE-2021-29505
XStream is software for serializing Java objects to XML and back again ...
openSUSE-SU-2021:1995-1
Security update for xstream
openSUSE-SU-2021:0911-1
Security update for xstream
SUSE-SU-2021:1995-1
Security update for xstream
ELSA-2021-2683
ELSA-2021-2683: xstream security update (IMPORTANT)
BDU:2021-03903
Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат Xstream, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-7chv-rrw6-w6fc XStream is vulnerable to a Remote Command Execution attack | CVSS3: 7.5 | 78% Высокий | около 5 лет назад |
 | CVE-2021-29505 XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17. | CVSS3: 7.5 | 78% Высокий | около 5 лет назад |
 | CVE-2021-29505 XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17. | CVSS3: 7.5 | 78% Высокий | около 5 лет назад |
 | CVE-2021-29505 XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17. | CVSS3: 7.5 | 78% Высокий | около 5 лет назад |
| CVE-2021-29505 XStream is software for serializing Java objects to XML and back again ... | CVSS3: 7.5 | 78% Высокий | около 5 лет назад |
 | openSUSE-SU-2021:1995-1 Security update for xstream | 78% Высокий | около 5 лет назад | |
| openSUSE-SU-2021:0911-1 Security update for xstream | 78% Высокий | около 5 лет назад | |
| SUSE-SU-2021:1995-1 Security update for xstream | 78% Высокий | около 5 лет назад | |
| ELSA-2021-2683 ELSA-2021-2683: xstream security update (IMPORTANT) | 78% Высокий | около 5 лет назад | |
 | BDU:2021-03903 Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат Xstream, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольные команды | CVSS3: 7.5 | 78% Высокий | около 5 лет назад |
Уязвимостей на страницу