UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21343

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject…

Severity
High 7.5
Published
23 Mar 2021
Last changed
7 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.15.14
Sources
NVD

Affected software

SoftwareAffected versions
Apache ActiveMQServers and applications · cpe:a:apache:activemq
  • Every version before 5.15.14
  • Version 5.16.0
  • Version 5.16.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21343
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21343