CVE-2017-7957 in Notes
요약
\~에 의해 MITRE
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("") call.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.