Lucene search
China National Vulnerability DatabaseCNVD-2021-67821HistoryAug 23, 2021 - 12:00 a.m.
XStream SSRF Vulnerability (CNVD-2021-67821)
2021-08-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
xstream
ssrf
vulnerability
java
xml
json
serialization
deserialization
remote attackers
sensitive information
EPSS
0.013
Percentile
86.1%
XStream is an open source Java class library that is mainly used to serialize objects to XML (JSON) or deserialize them to objects.XStream 1.4.17 and previous versions have a server-side request forgery vulnerability, which can be used by remote attackers to submit special requests that can obtain sensitive information.
Related
ubuntucve
ubuntucve
CVE-2021-39150
2021-08-23 00:00:00
cve
cve
CVE-2021-39150
2021-08-23 19:15:12
osv
osv
veracode
veracode
Remote Code Execution (RCE)
2021-08-24 06:59:20
debiancve
debiancve
CVE-2021-39150
2021-08-23 19:15:12
cvelist
cvelist
prion
prion
Design/Logic Flaw
2021-08-23 19:15:00
github
github
redhatcve
redhatcve
CVE-2021-39150
2021-08-25 19:28:41
nvd
nvd
CVE-2021-39150
2021-08-23 19:15:12
ibm
ibm
githubexploit
githubexploit
debian
debian
[SECURITY] [DLA 2769-1] libxstream-java security update
2021-09-29 23:28:17
[SECURITY] [DSA 5004-1] libxstream-java security update
2021-11-10 20:29:25
[SECURITY] [DSA 5004-1] libxstream-java security update
2021-11-10 20:29:25
nessus
nessus
RHEL 7 : xstream (RHSA-2021:3956)
2021-10-26 00:00:00
openSUSE 15 Security Update : xstream (openSUSE-SU-2021:3476-1)
2021-10-21 00:00:00
Amazon Linux 2 : xstream (ALAS-2021-1729)
2021-12-10 00:00:00
suse
suse
Security update for xstream (important)
2021-10-31 00:00:00
Security update for xstream (important)
2021-10-20 00:00:00
redhat
redhat
(RHSA-2021:3956) Important: xstream security update
2021-10-25 06:30:03
(RHSA-2022:0297) Moderate: Red Hat Decision Manager 7.12.0 security update
2022-01-26 16:28:59
mageia
mageia
Updated xstream/xmlpull/mxparser packages fix security vulnerability
2021-10-13 22:39:52
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0474)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-5004-1)
2021-11-14 00:00:00
openSUSE: Security Advisory for xstream (openSUSE-SU-2021:3476-1)
2021-10-21 00:00:00
ubuntu
ubuntu
XStream vulnerabilities
2023-03-13 00:00:00
amazon
amazon
Important: xstream
2021-12-08 16:28:00
oraclelinux
oraclelinux
xstream security update
2021-10-25 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: xstream-1.4.18-2.fc33
2021-10-12 23:47:14
[SECURITY] Fedora 34 Update: xstream-1.4.18-2.fc34
2021-10-12 23:45:05
[SECURITY] Fedora 35 Update: xstream-1.4.18-2.fc35
2021-10-29 23:18:39
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00