Description
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
Remediation
References
https://github.com/glazedlists/glazedlists/issues/709
Related Vulnerabilities
CVE-2020-7684 Vulnerability in npm package rollup-plugin-serve
CVE-2023-40809 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2020-7663 Vulnerability in maven package org.webjars.npm:websocket-extensions
CVE-2022-34298 Vulnerability in maven package org.openidentityplatform.openam:openam-auth-nt
CVE-2021-23383 Vulnerability in maven package org.webjars.npm:handlebars