Description
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
Remediation
References
https://github.com/glazedlists/glazedlists/issues/709
Related Vulnerabilities
CVE-2022-31198 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts
CVE-2018-14042 Vulnerability in maven package org.webjars.npm:bootstrap-sass
CVE-2019-11003 Vulnerability in npm package materialize-css
CVE-2021-27290 Vulnerability in maven package org.webjars.npm:ssri
CVE-2022-31160 Vulnerability in maven package org.webjars:jquery-ui