Filtered by vendor Apache Subscriptions
Filtered by product Maven Shared Utils Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-29599 3 Apache, Debian, Redhat 8 Maven Shared Utils, Debian Linux, Enterprise Linux and 5 more 2024-11-21 9.8 Critical
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.