CVE-2017-9805
Published Sep 15, 2017The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type…
- evidence mentions
- 24
- Buzz score
- 68.0