Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-31890

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-p6m6-9j36-vfjx

glazedlists XML Deserialization vulnerability An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.

gitlab/maven/com.glazedlists/glazedlists/CVE-2023-31890

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.