Security
فارسی
All products

Red Hat Enterprise Linux 7/xstream

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Server-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258 · GHSA-4CCH-WXPW-8P28 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259 · GHSA-JFVX-7WRX-43FH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
Denial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859 · GHSA-RMR5-CPV2-VGJF com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
Denial of service in XStreamCVE-2017-7957 · GHSA-7HWC-46RM-65JH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XML External Entity Injection in XStreamCVE-2016-3674 · GHSA-RGH3-987H-WPMW com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflowCVE-2022-40151 · GHSA-F8CC-G7J8-XXPM com.thoughtworks.xstream:xstreamMigration Toolkit for Runtimes/xstream MavenRed Hat High Fix reported
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342 · GHSA-HVV8-336G-RX3M com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349 · GHSA-F6HM-88X3-MFJV com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348 · GHSA-56P8-3FH9-4CVQ com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343 · GHSA-74CV-F58X-F9WF com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream can cause a Denial of Service.CVE-2021-21341 · GHSA-2P3X-QW9C-25HH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351 · GHSA-HRCP-8F3Q-4W2C com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported