XStream 代码问题漏洞

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://x-stream.github.io/CVE-2020-26258.html

来源:CONFIRM

链接:https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/

来源:MISC

链接:https://x-stream.github.io/CVE-2020-26258.html

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210409-0005/

来源:MLIST

链接:https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34@%3Ccommits.struts.apache.org%3E

来源:DEBIAN

链接:https://www.debian.org/security/2021/dsa-4828

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161201/Ubuntu-Security-Notice-USN-4714-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1821

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Xstream-information-disclosure-via-Server-Side-Forgery-Request-34229

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-26258

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0328/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0019/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0977

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-xstream/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1594

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162527/Ubuntu-Security-Notice-USN-4943-1.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021062145

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-mongodb-node-js-docker-and-xstream-affect-ibm-spectrum-protect-plus/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3984

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2185

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0254/

来源:http-jackson-databind-openssl-and-node-js-affect-ibm-spectrum-control

链接:http-jackson-databind-openssl-and-node-js-affect-ibm-spectrum-control/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-xstream-apache-

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2731

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-a-security-vulnerability-has-been-identified-in-xstream-which-is-a-required-product-for-ibm-tivoli-network-configuration-manager-cve-2020-26258-cve-2020-26259/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163201/Red-Hat-Security-Advisory-2021-2475-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/162839/Red-Hat-Security-Advisory-2021-2139-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/165052/Red-Hat-Security-Advisory-2021-4767-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0082/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-is-affected-by-multiple-vulnerabilities-in-xstream/