Skip to content
Sign in
Not rated

CVE-2022-29599 In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings…

Description

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

Affected products and versions

Product Affected versions Fixed in
Apache Maven 3.3 earliest → < 3.3.3 3.3.3

Other CVEs of Apache Maven

The 2 CVEs of Apache Maven →
CVE-2021-26291 Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be… Not rated
Track this CVE