Lucene search

K
f5F5F5:K97399672
HistoryJun 02, 2022 - 12:00 a.m.

K97399672 : Apache Maven vulnerability CVE-2022-29599

2022-06-0200:00:00
my.f5.com
27
apache maven
commandline class
vulnerability
cve-2022-29599

AI Score

9.5

Confidence

High

EPSS

0.025

Percentile

90.2%

Security Advisory Description

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks. (CVE-2022-29599)

Impact

There is no impact; F5 products are not affected by this vulnerability.