com.thoughtworks.xstream:xstream vulnerabilities (Maven)
37 vulnerabilities.
-
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 7.5 High -
com.thoughtworks.xstream:xstreamMaven XStream Denial of Service via stack overflow 8.2 High -
com.thoughtworks.xstream:xstreamMaven Stack Buffer Overflow in xstream 6.5 Medium -
com.thoughtworks.xstream:xstreamMaven Denial of Service by injecting highly recursive collections or maps in XStream 7.5 High -
com.thoughtworks.xstream:xstreamMaven A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling 8.5 High -
com.thoughtworks.xstream:xstreamMaven A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream can cause a Denial of Service 6.5 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to a Remote Command Execution attack 8.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to a Remote Command Execution attack 7.5 High -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 5.4 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 5.3 Medium -
com.thoughtworks.xstream:xstreamMaven A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 6.1 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) 5.3 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 6.1 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 6.1 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to a Remote Command Execution attack 5.8 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary Code Execution attack 5.3 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights 5.3 Medium -
com.thoughtworks.xstream:xstreamMaven A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 5.3 Medium -
com.thoughtworks.xstream:xstreamMaven XStream can cause a Denial of Service 7.5 High -
com.thoughtworks.xstream:xstreamMaven Server-Side Forgery Request can be activated unmarshalling with XStream 6.3 Medium -
com.thoughtworks.xstream:xstreamMaven XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling 6.8 Medium -
com.thoughtworks.xstream:xstreamMaven Remote Code Execution in XStream 8.0 High -
com.thoughtworks.xstream:xstreamMaven Deserialization of Untrusted Data and Code Injection in xstream 7.3 High -
com.thoughtworks.xstream:xstreamMaven Denial of service in XStream 7.5 High -
com.thoughtworks.xstream:xstreamMaven XML External Entity Injection in XStream 7.5 High -
com.thoughtworks.xstream:xstreamMaven Command Injection in Xstream 9.8 Critical