(CVE-2021-39141) XStream 反序列化漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/cve-2021-39141
• https://x-stream.github.io/CVE-2021-39141.html
• https://github.com/advisories/GHSA-g5w6-mrj7-75h2
• https://www.cve.org/CVERecord?id=CVE-2021-39141
• https://avd.aliyun.com/detail?id=AVD-2021-39141
• https://security.snyk.io/vuln/SNYK-AMZN2-XSTREAM-2315771
• https://www.huaweicloud.com/notice/2021/20210823114456950.html
• https://blog.nsfocus.net/xstream-se/
• https://x-stream.github.io/security.html
• https://nosec.org/m/share/4829.html

Related Vulnerabilities

• PoCCVE-2013-7285: XStream <1.4.6/1.4.10 - Remote Code Execution
• PoCCVE-2020-26217: XStream <1.4.14 - Remote Code Execution
• PoCCVE-2020-26258: XStream <1.4.15 - Server-Side Request Forgery
• PoCCVE-2021-21345: XStream < 1.4.16 - Remote Code Execution
• PoCCVE-2021-21351: XStream <1.4.16 - Remote Code Execution
• PoCCVE-2021-29505: XStream <1.4.17 - Remote Code Execution
• PoCCVE-2021-39141: XStream 1.4.18 - Remote Code Execution
• PoCCVE-2021-39144: XStream 1.4.18 - Remote Code Execution
• PoCCVE-2021-39146: XStream 1.4.18 - Arbitrary Code Execution
• PoCCVE-2021-39152: XStream <1.4.18 - Server-Side Request Forgery
• PoCCVE-2023-39141: Aria2 WebUI - Path traversal
• PoCvmware-nsx-stream-rce: VMware NSX Manager XStream Pre-authenticated Remote Code Execution
• EasySite Xstream 反序列化漏洞