CVE-2016-3674
1 advisory.
Maven/com.thoughtworks.xstream:xstream CVE-2016-3674: high 7.5, EPSS 8.18%
XML External Entity Injection in XStream
Action: Upgrade com.thoughtworks.xstream:xstream to 1.4.9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.9 | - |
Fixed versions
| 1.4.9 |
Sources
- osv: GHSA-rgh3-987h-wpmw
- https://nvd.nist.gov/vuln/detail/CVE-2016-3674
- https://github.com/x-stream/xstream/issues/25
- https://github.com/x-stream/xstream
- https://snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183180.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183208.html
- http://rhn.redhat.com/errata/RHSA-2016-2822.html
- http://rhn.redhat.com/errata/RHSA-2016-2823.html
- http://www.debian.org/security/2016/dsa-3575
- http://www.openwall.com/lists/oss-security/2016/03/25/8
- http://www.openwall.com/lists/oss-security/2016/03/28/1
- http://www.securityfocus.com/bid/85381
- http://www.securitytracker.com/id/1036419
- http://x-stream.github.io/changes.html#1.4.9
CVE-2016-3674 · published · modified · JSON