[WW-5142] Upgrade XStream to version 1.4.18

• Type: Dependency
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 6.0.0
• Component/s: Core
• Assignee: Lukasz Lenart
• Reporter: Lukasz Lenart
• Created: 26/Sep/21 07:54
• Updated: 14/Jun/22 09:47
• Resolved: 12/Nov/21 14:09

Description

This maintenance release addresses the security vulnerabilities CVE-2021-39139, CVE-2021-39140, CVE-2021-39141, CVE-2021-39144, CVE-2021-39145, CVE-2021-39146, CVE-2021-39147, CVE-2021-39148, CVE-2021-39149, CVE-2021-39150, CVE-2021-39151, CVE-2021-39152, CVE-2021-39153, and CVE-2021-39154, when unmarshalling with an XStream instance using the default blacklist of an uninitialized security framework. XStream is therefore now using a whitelist by default.

Issue Links

• is related to: WW-5143 Upgrade Oval library to ver. 3.2.1