Security
فارسی
All products

Red Hat Integration Camel K 1/xstream

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Server-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258 · GHSA-4CCH-WXPW-8P28 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input streamCVE-2024-47072 · GHSA-HFQ9-HGGM-C56Q com.thoughtworks.xstream:xstreamCryostat 3/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146 · GHSA-P8PQ-R894-FM8F com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259 · GHSA-JFVX-7WRX-43FH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
Denial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859 · GHSA-RMR5-CPV2-VGJF com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream can be used for Remote Code ExecutionCVE-2020-26217 · GHSA-MW36-7C6C-Q4Q2 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream can cause Denial of Service via stack overflowCVE-2022-41966 · GHSA-J563-GRX4-PJPV com.thoughtworks.xstream:xstreamRed Hat Data Grid 8/xstream MavenRed Hat High Fix reported
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflowCVE-2022-40151 · GHSA-F8CC-G7J8-XXPM com.thoughtworks.xstream:xstreamMigration Toolkit for Runtimes/xstream MavenRed Hat High Fix reported
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342 · GHSA-HVV8-336G-RX3M com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21350 · GHSA-43GC-MJXG-GVRQ com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349 · GHSA-F6HM-88X3-MFJV com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348 · GHSA-56P8-3FH9-4CVQ com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21346 · GHSA-4HRM-M67V-5CXR com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343 · GHSA-74CV-F58X-F9WF com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream can cause a Denial of Service.CVE-2021-21341 · GHSA-2P3X-QW9C-25HH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351 · GHSA-HRCP-8F3Q-4W2C com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21347 · GHSA-QPFQ-PH7R-QV6F com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21344 · GHSA-59JW-JQF4-3WQ3 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to a Remote Command Execution attackCVE-2021-21345 · GHSA-HWPC-8XQV-JVJ4 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported