Servers and applications
CVE-2021-21341
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the…
- Severity
- High 7.5
- Published
- 23 Mar 2021
- Last changed
- 7 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 5.15.14
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Apache ActiveMQServers and applications · cpe:a:apache:activemq |
|