REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering
High severity
GitHub Reviewed
Published
Oct 16, 2018
to the GitHub Advisory Database
•
Updated Jan 5, 2024
Give feedback on Dependabot alerts