X-stream vulnerabilities
We track 3 vulnerabilities in X-stream products across 2 products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 8, 2024.
Latest X-stream vulnerabilities
- 7.5 High severity
xstream: Stack-based Buffer Overflow
XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream whe
- 7.5 High severity
xstream: Uncontrolled Recursion
XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack
- 8.5 High severity
XStream Remote Code Execution Exploited
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affect