Al1ex/CVE-2020-26259

PoC

CVE-2020-26259 &&XStream Arbitrary File Delete

view exploit source poc_in_githubauthor Al1expublished 2021-01-22catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-26259US	medium6.8	82.4% (100th)	Exploit	2020-12-16
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshal…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.