CVE-2023-31890
glazedlists: XML Deserialization permits code execution via BeanXMLByteCoder parameter
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
CVSS 3.1 · 9.8 Critical
EPSS 1.0%
KEV · Not listed
Vendors
Products