CVE-2022-29599

9.8CRITICAL

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

发布于: 5/23/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.

AI分析AI驱动

受影响产品

apachemaven_shared_utils
debiandebian_linux
10.0
debiandebian_linux
11.0

参考资料