Design/Logic Flaw

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

UBUNTU-CVE-2021-26291

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

CVE-2021-26291

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

CVE-2021-26291

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

CVE-2021-26291

CVE-2021-26291: Apache Maven could allow a remote attacker to bypass security restrictions by default non-SSL (http) repository references. Affected IBM/Bundled deployments cite this vulnerability and provide remediation paths, including upgrading Maven-driven components to versions that include ...

CVE-2021-26291 block repositories using http by default

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

CVE-2021-26291

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

Apache Maven 访问控制错误漏洞

Apache Maven is an application from the Apache USA Foundation. A software project management and understanding tool. Apache Maven suffers from a security vulnerability that stems from the potential risk of a malicious participant taking over the repository or being able to insert themselves into ...

CVE-2021-21642

A flaw was found in the config-file-provider Jenkins plugin. The plugin XML parser wasn't configure to prevent XML external entity XXE attacks. An attacker with the ability to define Maven configuration files can use this vulnerability to prepare a crafted configuration file that uses external...

FreeBSD : Apache Maven -- multiple vulnerabilities (20006b5f-a0bc-11eb-8ae6-fc4dd43e2b6a)

The Apache Maven project reports : We received a report from Jonathan Leitschuh about a vulnerability of custom repositories in dependency POMs. We've split this up into three separate issues : - Possible Man-In-The-Middle-Attack due to custom repositories using HTTP. More and more repositories u...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472

Summary: CVE-2021-28472 refers to a remote code execution vulnerability in the Visual Studio Code Maven for Java Extension. The OSV/NVD entries corroborate that the extension can be exploited to execute arbitrary code on affected systems. The vulnerability is tied to the Maven for Java extension ...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

EUVD-2021-15150

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

PT-2021-2741 · Microsoft · Vscode-Maven

Name of the Vulnerable Software and Affected Versions: Maven for Java Extension vscode-maven versions affected versions not specified Description: The issue is related to incorrect code generation management in the Maven for Java Extension for Microsoft Visual Studio Code. Exploitation of this...