maven

com.thoughtworks.xstream:xstream

38 Total advisories

38 Vulnerabilities

0 Malware

Dependency scanning

Check whether com.thoughtworks.xstream:xstream is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

com.thoughtworks.xstream:xstream

Vulnerabilities

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

XStream can cause a Denial of Service.

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

Denial of Service by injecting highly recursive collections or maps in XStream

A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

XStream is vulnerable to a Remote Command Execution attack

XStream is vulnerable to a Remote Command Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream can cause a Denial of Service

XStream is vulnerable to a Remote Command Execution attack

XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

XStream can be used for Remote Code Execution

XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling

Server-Side Forgery Request can be activated unmarshalling with XStream

Deserialization of Untrusted Data and Code Injection in xstream

XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

Denial of service in XStream

XML External Entity Injection in XStream

Duplicate Advisory: Denial of Service due to parser crash

Command Injection in Xstream

XStream can cause Denial of Service via stack overflow

XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow

Browse more Maven advisories

Start Securing