Security Advisory
CVE-2016-5003
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.