Critical · 9.8 CVE-2023-31890 EUVD-2023-1592GHSA-p6m6-9j36-vfjx

glazedlists XML Deserialization vulnerability

Published May 16, 2023 · Updated Jan 23, 2025 · Assigned by mitre

Description

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.glazedlists:glazedlists	1.11.0	—	GHSA-p6m6-9j36-vfjx