Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Maven Shared Utils
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29599 2 Apache, Debian 2 Maven Shared Utils, Debian Linux 2024-11-21 7.5 HIGH 9.8 CRITICAL
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.