Description
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely when configured with an xml.codec=httl.spi.codecs.XstreamCodec setting.
Unscored
CVE-2018-19530
EUVD-2018-11219GHSA-jxhc-f56v-qm29
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely…
Published Nov 26, 2018 · Updated Aug 5, 2024 · Assigned by mitre