Critical · 9.8 CVE-2023-39013 EUVD-2023-2110GHSA-p83q-99rc-vfmv

Code injection in Duke

Published Jul 28, 2023 · Updated Oct 22, 2024 · Assigned by mitre

Description

Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.

Ecosystem	Package	Affected	Fixed	Record
Maven	no.priv.garshol.duke:duke	<= 1.2	—	GHSA-p83q-99rc-vfmv