Package · Debian

commons-configuration2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2022-33980 Public exploit EPSS 45%

Apache Commons Configuration insecure interpolation defaults

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.configura…

Apache Software Foundation Apache Commons Configuration commons-configuration2 org.apache.commons:commons-configuration2 Debian Ubuntu Maven

Jul 6, 2022
Critical 10.0

CVE-2020-1953

Remote code execution in Apache Commons Configuration

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default …

Apache Apache Commons Configuration org.apache.commons:commons-configuration2 commons-configuration2 Debian Ubuntu Maven

Mar 13, 2020