Glazedlists

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Glazedlists records in CISA KEV

No Glazedlists vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Glazed Lists · all components

TI-2023-15254 CVE-2023-31890 · GHSA-p6m6-9j36-vfjx

HIGH 82

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01013 Published 2023-05-16 No fix listed CWE-502