| A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-39152 · GHSA-XW4P-CRPJ-VJX2 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Server-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258 · GHSA-4CCH-WXPW-8P28 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148 · GHSA-QRX8-8545-4WG2 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141 · GHSA-G5W6-MRJ7-75H2 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-39150 · GHSA-CXFM-5M4G-X7XP |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146 · GHSA-P8PQ-R894-FM8F |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147 · GHSA-H7V4-7XG3-HXCC |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145 · GHSA-8JRJ-525P-826V |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to a Remote Command Execution attackCVE-2021-29505 · GHSA-7CHV-RRW6-W6FC |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151 · GHSA-HPH2-M3G5-XXV4 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39153 · GHSA-2Q8X-2P7F-574V |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139 · GHSA-64XX-CQ4Q-MF44 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149 · GHSA-3CCQ-5VW3-2P6X |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154 · GHSA-6W62-HX7R-MW68 |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream can cause a Denial of ServiceCVE-2021-39140 · GHSA-6WF9-JMG9-VXCC |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| XStream is vulnerable to a Remote Command Execution attackCVE-2021-39144 · GHSA-J9H8-PHRW-H4FH |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259 · GHSA-JFVX-7WRX-43FH |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Denial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859 · GHSA-RMR5-CPV2-VGJF |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity Injection in XStreamCVE-2016-3674 · GHSA-RGH3-987H-WPMW |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342 · GHSA-HVV8-336G-RX3M |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
