Description
An untrusted deserialization was found in the
org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache
XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a
XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no
longer maintained and this issue will not be fixed.
Package
| Upstream: | needs-triage
|
| Ubuntu 18.04 LTS: | released
(3.1.3-9+deb10u1build0.18.04.1)
|
| Ubuntu 20.04 LTS: | DNE
|
| Ubuntu 14.04 ESM: | DNE
|
Patches:
Updated: 2022-04-13 13:49:51 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)