diff --git a/xstream-distribution/src/content/CVE-2022-40151.html b/xstream-distribution/src/content/CVE-2022-40151.html index 5fd80e5b6..d3829677c 100644 --- a/xstream-distribution/src/content/CVE-2022-40151.html +++ b/xstream-distribution/src/content/CVE-2022-40151.html @@ -35,11 +35,11 @@

Steps to Reproduce

following code snippet and unmarshal it with XStream:

String xml = new String();
         int i = 0;
-        for( ; i < 10000; ++i) {
-            xml += "";
+        for( ; i < 10000; ++i) {
+            xml += "<set>";
         }
-        for( ; i > 0; --i) {
-            xml += "";
+        for( ; i > 0; --i) {
+            xml += "</set>";
         }
 
XStream xstream = new XStream();