Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:32:08 +0000 bdu:2017-02058 https://cve.radiocsirt.org/vuln/bdu:2017-02058 bdu:2017-02058 https://cve.radiocsirt.org/vuln/bdu:2017-02058 certfr-2017-avi-285 — Une vulnérabilité a été corrigée dans <span class="textit">Apache Struts</span>. Elle permet à un attaquant de provoque… https://cve.radiocsirt.org/vuln/certfr-2017-avi-285 certfr-2017-avi-285 https://cve.radiocsirt.org/vuln/certfr-2017-avi-285 cnvd-2017-25267 https://cve.radiocsirt.org/vuln/cnvd-2017-25267 cnvd-2017-25267 https://cve.radiocsirt.org/vuln/cnvd-2017-25267 EUVD-2026-256309 https://cve.radiocsirt.org/vuln/euvd-2026-256309 EUVD-2026-256309 https://cve.radiocsirt.org/vuln/euvd-2026-256309 fkie_cve-2017-9805 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9805 <p>The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.</p> <p>The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9805 GHSA-gg9m-fj3v-r58c — REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type fi… https://cve.radiocsirt.org/vuln/ghsa-gg9m-fj3v-r58c <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-rest-plugin</p> <p>The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.</p> <p><strong>Affected:</strong> Maven: org.apache.struts:struts2-rest-plugin</p> <p>The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.</p> https://cve.radiocsirt.org/vuln/ghsa-gg9m-fj3v-r58c gsd-2017-9805 https://cve.radiocsirt.org/vuln/gsd-2017-9805 gsd-2017-9805 https://cve.radiocsirt.org/vuln/gsd-2017-9805