Executive brief
Code injection in Apache Commons Configuration
Affected products
- Maven org.apache.commons:commons-configuration2
Junglewise Threat Intelligence
CVE-2022-33980: Code injection in Apache Commons Configuration
CVE-2022-33980 · Severity: low · CVSS 3.1 · Published 2022-07-07
Technologies: org.apache.commons:commons-configuration2 (Maven). Vendors: Maven.
Related threats
- Apache Commons Configuration uncontrolled recursion in YAMLConfiguration
- Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
- Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
- Remote code execution in Apache Commons Configuration