Description
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
Remediation
References
https://github.com/glazedlists/glazedlists/issues/709
Related Vulnerabilities
CVE-2023-4853 Vulnerability in maven package io.quarkus:quarkus-undertow
CVE-2021-41973 Vulnerability in maven package org.apache.mina:mina-http
CVE-2023-51075 Vulnerability in maven package cn.hutool:hutool-core
CVE-2022-41710 Vulnerability in npm package electron-markdownify
CVE-2022-23463 Vulnerability in maven package com.nepxion:discovery-commons