CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472

Summary: CVE-2021-28472 refers to a remote code execution vulnerability in the Visual Studio Code Maven for Java Extension. The OSV/NVD entries corroborate that the extension can be exploited to execute arbitrary code on affected systems. The vulnerability is tied to the Maven for Java extension ...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

EUVD-2021-15150

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

PT-2021-2741 · Microsoft · Vscode-Maven

Name of the Vulnerable Software and Affected Versions: Maven for Java Extension vscode-maven versions affected versions not specified Description: The issue is related to incorrect code generation management in the Maven for Java Extension for Microsoft Visual Studio Code. Exploitation of this...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code, which stems from a remote code execution vulnerability in Visual Studio Code Maven Extension for Java. The following products and...

Security Update for Microsoft Visual Studio Code Maven for Java Extension (April 2021)

The Microsoft Visual Studio Code Maven for Java Extension is prior to version 0.29.0. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system...

Apache Maven -- multiple vulnerabilities

The Apache Maven project reports: We received a report from Jonathan Leitschuh about a vulnerability of custom repositories in dependency POMs. We've split this up into three separate issues: Possible Man-In-The-Middle-Attack due to custom repositories using HTTP. More and more repositories use...

Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 Vaadin 12.0.0 through 14.4.9, and 6.0.0 through 6.0.1 Vaadin 19.0.0 allows attacker to access application classes and resources on the server via crafted HTTP request. See CWE-402: Transmission of Private...

GHSA-5MG8-W23W-74H3 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, trino, spark-fips, druid, hadoop-client-modules, hadoop-fips, celeborn, maven-stage0, gradle, spdx-tools-java...

GHSA-5MG8-W23W-74H3 vulnerabilities

Vulnerabilities for packages: gradle, celeborn, trino, maven-stage0, druid, spdx-tools-java, cassandra-reaper...

Logic flaw vulnerability in oasys

oasys is an OA office automation system , the use of Maven for project management , springboot framework based on the development of the project , mysql underlying database , the front-end freemarker template engine , Bootstrap as the front-end UI framework , integrated jpa, mybatis and other...

Unauthorised Modification

pgpverify-maven-plugin allows unauthorized modification. An attacker is able to push base repository or access secrets by checking out and running build script from a fork the untrusted code is running in an environment...

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...

CVE-2021-26719

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor with certain credentials can perform a registration step such that craft...