CVE-2016-5003 in Archiva
Summary
The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/24/2016
Disclosure
10/27/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 90262 | Apache Archiva Deserialize deserialization | 502 | Not defined | Official fix | CVE-2016-5003 |