Executive brief
Remote code execution in Apache Commons Configuration
Affected products
- Maven org.apache.commons:commons-configuration2
Junglewise Threat Intelligence
CVE-2020-1953: Remote code execution in Apache Commons Configuration
CVE-2020-1953 · Severity: low · CVSS 3.1 · Published 2020-05-21
Technologies: org.apache.commons:commons-configuration2 (Maven). Vendors: Maven.
Related threats
- Apache Commons Configuration uncontrolled recursion in YAMLConfiguration
- Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
- Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
- Code injection in Apache Commons Configuration