REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering
High severity
GitHub Reviewed
Published
Oct 16, 2018
to the GitHub Advisory Database
•
Updated Feb 7, 2025
Give feedback on Dependabot alerts