<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: exadel-flamingo-amf-serializer</title><description>Every new CVE for exadel-flamingo-amf-serializer.</description><link>https://agentprime.io/</link><item><title>CVE-2017-3206: The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages</title><link>https://agentprime.io/advisories/CVE-2017-3206/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-3206/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Jun 2018 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-3201: Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization</title><link>https://agentprime.io/advisories/CVE-2017-3201/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-3201/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Jun 2018 17:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>