Description
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncoder unsafely when configured without an xml.codec= setting.
Unscored
CVE-2018-19531
EUVD-2018-11220GHSA-6j96-6x23-46xg
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEn…
Published Nov 26, 2018 · Updated Aug 5, 2024 · Assigned by mitre