Sploitus

CVE-2018-19530

No indexed exploits for CVE-2018-19530 yet

HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely when configured with an xml.codec=httl.spi.codecs.XstreamCodec setting.

Affected products
Httl, Xstream
Httl Project Httl
≤ 1.0.11
Fix
Available
CVSS 3.0
9.8 CRITICAL
EPSS
4.6% (91th percentile)
Weakness
CWE-20
NVD status
Modified
Published
2018-11-26
CVE-2018-19530 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2018-19530 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2018-19530 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.