← Back

Maven Shared Utils

maven_shared_utils

Vendor: Apache • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-29599
2Apache
Debian
2Debian Linux
Maven Shared Utils
Nov 21, 2024
May 23, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.