coldbraid

CVE-2021-39144 XStream XStream

XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.

CVSS
not scored

CWE-94CWE-502

On CISA’s exploited list

XStream Remote Code Execution Vulnerability

Added
2023-03-10
Federal patch deadline
2023-03-31
Ransomware use
not known