jmrozanec__cron-utils_CVE-2021-41269_9-1-5

cron-utils We define crons. And support them. cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. The project follows the Semantic Versioning Convention, provides OSGi metadata and uses Apache 2.0 license. Download cron-utils...

EUVD-2021-2371

Malware in sbrugna...

cron-utils:CronParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5103060199735296 Project: cron-utils Fuzzing Engine: libFuzzer Fuzz Target: CronParserFuzzer Job Type: libfuzzerasancron-utils Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

cron-utils: template Injection leading to unauthenticated Remote Code Execution

A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...

Important: Red Hat Security Advisory: Service Registry (container images) release and security update [2.3.0.GA]

An update to the images for Red Hat Integration Service Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact o...

Moderate: Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.2.1 security update

A security update to Red Hat Integration Camel Extensions for Quarkus 2.2 is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Moderate. A Common Vulnerability Scoring System...

cron-utils: template Injection leading to unauthenticated Remote Code Execution

A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...

Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 2.2.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...

cron-utils Code Execution

The vulnerability of the Java library for determining, analyzing, checking, and migrating cron elements in cron-utils is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-41269

A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...

Cron Utils Code Injection Vulnerability

Cron Utils is Jmrozanec individual developers of a Java code base for validating , parsing , migrating Cron expressions . A code injection vulnerability exists in Cron Utils that allows an attacker to inject arbitrary Java EL expressions to execute remote code...

Template Injection

cron-utils is vulnerable to template injection. An attacker can inject arbitrary java EL expressions through the parse function in CronParser.java, leading to remote code execution...

com.northernwall:hadrian (>=1.6.14, <=1.9.1) potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (5.0.1)

com.cronutils:cron-utils MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.northernwall:hadrian =1.6.14, =1.9.1 Source cves: CVE-2021-41269 Source advisory: OSV:GHSA-P9M8-27X8-RG87...

com.thinkbiganalytics.kylo.plugins:kylo-sla-email (>=0.9.1, <=0.10.0), com.thinkbiganalytics.kylo:kylo-metadata-modeshape (0.9.1) +1 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (2.0.0)

com.cronutils:cron-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.thinkbiganalytics.kylo.plugins:kylo-sla-email =0.9.1, =0.9.1, =0.10.0 Source cves: CVE-2021-41269 Source...

de.viadee:viadeeprocessapplicationvalidator (>=2.2.3, <=2.4.0) potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (6.0.3)

com.cronutils:cron-utils MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - de.viadee:viadeeprocessapplicationvalidator =2.2.3, =2.4.0 Source cves: CVE-2021-41269 Source advisory:...

com.github.anilganipineni:scheduler (>=0.1, <=0.4), com.github.shijingsh:shijingsh-ai-core (1.0.0) +29 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (8.0.0)

com.cronutils:cron-utils MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.github.anilganipineni:scheduler =0.1, =0.4 - com.github.shijingsh:shijingsh-ai-core 1.0.0 -...

org.hswebframework:hsweb-task-cluster (1.0.0-rc), org.hswebframework:hsweb-task-core (1.0.0-rc) +1 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (7.0.5)

com.cronutils:cron-utils MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - org.hswebframework:hsweb-task-cluster 1.0.0-rc - org.hswebframework:hsweb-task-core 1.0.0-rc -...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +234 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (>=9.0.0, <=9.1.5)

com.cronutils:cron-utils MAVEN version =9.0.0, =0.0.2, =0.0.21, =0.0.1, =0.1.2, =0.0.1, =1.2.19, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.6 and more Source cves: CVE-2021-41269 Source advisory: OSV:GHSA-P9M8-27X8-RG87...

com.walmartlabs.bigben:bigben-app (>=1.0.4, <=1.0.8), com.walmartlabs.bigben:bigben-cron (>=1.0.4, <=1.0.8) +3 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (7.0.2)

com.cronutils:cron-utils MAVEN version 7.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.walmartlabs.bigben:bigben-app =1.0.4, =1.0.4, =2.6.0, =2.7.0 Source cves: CVE-2021-41269 Source advisory:...

pl.touk.nussknacker:nussknacker-management-sample_2.11 (>=0.1.0, <=0.3.0), pl.touk.nussknacker:nussknacker-management-sample_2.12 (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (3.1.1)

com.cronutils:cron-utils MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - pl.touk.nussknacker:nussknacker-management-sample2.11 =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 Source cves:...