References https://nvd.nist.gov/vuln/detail/CVE-2021-39141 https://x-stream.github.io/CVE-2021-39141.html https://github.com/advisories/GHSA-g5w6-mrj7-75h2 https://github.com/x-stream/xstream/security/advisories/GHSA-g5w6-mrj7-75h2 https://security-tracker.debian.org/tracker/CVE-2021-39141 https://avd.aliyun.com/detail?id=AVD-2021-39141 https://www.suse.com/security/cve/CVE-2021-39141.html https://security.snyk.io/vuln/SNYK-AMZN2-XSTREAM-2315771 https://bugzilla.redhat.com/show_bug.cgi?id=1997770 https://x-stream.github.io/security.html
Related VulnerabilitiesPoCCVE-2013-7285: XStream <1.4.6/1.4.10 - Remote Code ExecutionPoCCVE-2020-26217: XStream <1.4.14 - Remote Code ExecutionPoCCVE-2020-26258: XStream <1.4.15 - Server-Side Request ForgeryPoCCVE-2021-21345: XStream < 1.4.16 - Remote Code ExecutionPoCCVE-2021-21351: XStream <1.4.16 - Remote Code ExecutionPoCCVE-2021-29505: XStream <1.4.17 - Remote Code ExecutionPoCCVE-2021-39141: XStream 1.4.18 - Remote Code ExecutionPoCCVE-2021-39144: XStream 1.4.18 - Remote Code ExecutionPoCCVE-2021-39146: XStream 1.4.18 - Arbitrary Code ExecutionPoCCVE-2021-39152: XStream <1.4.18 - Server-Side Request ForgeryPoCCVE-2023-39141: Aria2 WebUI - Path traversalPoCvmware-nsx-stream-rce: VMware NSX Manager XStream Pre-authenticated Remote Code ExecutionEasySite Xstream 反序列化漏洞