Uploaded image for project: 'PUBLIC - Liferay Portal Enterprise Edition'
  1. PUBLIC - Liferay Portal Enterprise Edition
  2. LPE-13474

Upgrade XStream from 1.4.3 to 1.4.7

    XMLWordPrintable

Details

    Description

      XStream <= 1.4.6 is vulnerable to arbitrary code execution when deserializing objects.

      See also https://web.liferay.com/group/customer/products/portal/security-vulnerability/lsv-99

      Attachments

        Issue Links

          is related to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. LPS-53166 Upgrade XStream from 1.4.3 to 1.4.7

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              bryan.engler Bryan Engler
              juan.gonzalez Juan Gonzalez (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Packages

                  Version Package
                  6.1.X EE
                  6.2.X EE