Lucene search
+L

172 matches found

OSV
OSV
added 2020/05/21 7:8 p.m.5 views

GHSA-7QX4-PP76-VRQH Remote code execution in Apache Commons Configuration

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS7.3AI score0.06849EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2020/05/21 7:8 p.m.112 views

Remote code execution in Apache Commons Configuration

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS4.7AI score0.06849EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2020/03/25 2:39 a.m.42 views

CVE-2020-1953

A flaw was found in the Apache Commons Configuration, where it uses a third-party library to process YAML files, which by default, allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default...

10CVSS3AI score0.06849EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/03/17 12:0 a.m.6 views

Apache Commons Configuration Input Validation Error Vulnerability

Apache Commons Configuration is the United States Apache Apache Software Foundation , a common configuration interface , it is mainly used to enable Java applications to read configuration data from a variety of sources . An input validation error vulnerability exists in Apache Commons...

10CVSS9.2AI score0.06849EPSS
SaveExploits0
OSV
OSV
added 2020/03/13 3:15 p.m.1 views

DEBIAN-CVE-2020-1953

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS8.3AI score0.06849EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/13 3:15 p.m.11 views

CVE-2020-1953

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS9.5AI score
SaveExploits0References4
NVD
NVD
added 2020/03/13 3:15 p.m.22 views

CVE-2020-1953

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS9.6AI score0.06849EPSS
SaveExploits0References4
Prion
Prion
added 2020/03/13 3:15 p.m.23 views

Design/Logic Flaw

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

7.5CVSS9.4AI score0.06849EPSS
SaveExploits0References4Affected Software3
UbuntuCve
UbuntuCve
added 2020/03/13 3:15 p.m.53 views

CVE-2020-1953

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS7.2AI score0.06849EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2020/03/13 2:58 p.m.49 views

CVE-2020-1953

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

10CVSS8.7AI score0.06849EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/03/13 2:58 p.m.39 views

CVE-2020-1953

Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML...

9.5AI score0.06849EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2013/02/26 8:0 a.m.7 views

commons-configuration

| | math | | 1.2 | |...

7AI score
SaveExploits0
Rows per page
Query Builder