CVE-2019-17570

Published: 2020-01-23T22:15Z

Last Modified: 2024-11-21T04:32Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt