CVE-2016-5003

Critical

Published: 27/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Apache XML-RPC library version 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

Risk Assessment

An attacker could exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update the Apache XML-RPC library to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.