Detections
Analytics
CVE-2016-3674
high
Description
Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.
References
http://www.securitytracker.com/id/1036419
http://www.securityfocus.com/bid/85381
http://www.openwall.com/lists/oss-security/2016/03/28/1
https://github.com/andikahilmy/CVE-2020-26259-xstream-vulnerable
https://github.com/andikahilmy/CVE-2020-26258-xstream-vulnerable
https://github.com/andikahilmy/CVE-2020-26217-xstream-vulnerable
https://github.com/shoucheng3/x-stream__xstream_CVE-2021-21345_1-4-15
https://github.com/epicosy/XStream-1
https://github.com/advisories/GHSA-rgh3-987h-wpmw