https://bugzilla.redhat.com/show_bug.cgi?id=1508123
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A flaw was discovered in the Apache XML-RPC (ws-xmlrpc) library that deserializes
untrusted data when enabledForExtensions setting is enabled. A remote attacker could use
this vulnerability to execute arbitrary code via a crafted serialized Java object in a
<ex:serializable> element.
--
You are receiving this mail because:
You are on the CC list for the bug.