← All advisories

Critical severity9.8NVD Advisory· Published May 16, 2023· Updated Jun 17, 2026

CVE-2023-31890

CVE-2023-31890

Description

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

glazedlists/glazedlistsdescription
ghsa-coords
pkg:maven/com.glazedlists/glazedlists
Glazedlists/Glazed Lists
cpe:2.3:a:glazedlists:glazed_lists:1.11.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

github.com/glazedlists/glazedlists/issues/709nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-p6m6-9j36-vfjxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-31890ghsaADVISORY
github.com/glazedlists/glazedlists/blob/e0593e338246945dab4e83356ef44a59db172a80/extensions/io/src/main/java/ca/odell/glazedlists/impl/io/BeanXMLByteCoder.javaghsaWEB

News mentions

0

No linked articles in our index yet.