| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.xmlrpc:xmlrpc | ≤ 3.1.3 | |
| ws-xmlrpc | = 3.1.3 |
The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an ex:serializable element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free