Non notée
CVE-2022-29599 In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings…
Description
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Maven 3.3 | premières → < 3.3.3 | 3.3.3 |
Références
- issues.apache.org issues.apache.org
- github.com github.com
- [oss-security] 20220523 CVE-2022-29599: Apache Maven: Commandline class shell injection vulnerabilities www.openwall.com
- [debian-lts-announce] 20220829 [SECURITY] [DLA 3086-1] maven-shared-utils security update lists.debian.org
- DSA-5242 www.debian.org
Chronologie
- Publiée
- Dernière modification