CVE-2021-21343 - CVE House
Back to Database
Status published Medium CVE-2021-21343

XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

Vulnerability Description

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-21343

Credits & Attribution

No credits recorded in the NVD database.

References

More from x-stream

View All →
CVE-2024-47072
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
High 7.5
CVE-2022-41966
XStream Denial of Service via stack overflow
High 8.2
CVE-2021-43859
Denial of Service by injecting highly recursive collections or maps in XStream
High 7.5
CVE-2021-39154
XStream is vulnerable to an Arbitrary Code Execution attack
High 8.5
CVE-2021-39153
XStream is vulnerable to an Arbitrary Code Execution attack
High 8.5

Affected Vendor

Affected Software

xstream
Vulnerable Versions:
< 1.4.16

Timeline

Official Publish: March 22nd, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-73 CWE-502

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1105 Ingress Tool Transfer
Command and Control
T1574 Hijack Execution Flow
Privilege Escalation
T1565 Data Manipulation
Impact
T1059 Command and Scripting Interpreter
Execution
T1505.003 Web Shell
Persistence
T1068 Exploitation for Privilege Escalation
Privilege Escalation