Vulnerabilities (CVE)

  1. OpenCVE
  2. Vulnerabilities (CVE)
Filtered by vendor Apache Subscribe
Filtered by product Maven Shared Utils
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29599 2 Apache, Debian 2 Maven Shared Utils, Debian Linux 2023-12-10 7.5 HIGH 9.8 CRITICAL
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.