Read the docs
Red Hat Security Advisory

RHSA-2014:0294

XStream security update

Released 2014-03-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority CRITICAL 90

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarsh…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84362 Published 2019-05-15 Partial fix · 1.4.7, 1.4.11 CWE-78