jmrozanec__cron-utils_CVE-2021-41269_9-1-5

cron-utils 私たちはcronを定義し、そしてそれをサポートします。 cron-utils は、cron を定義、解析、検証、移行し、それらの人間が読める説明を取得するための Java ライブラリです。このプロジェクトは セマンティックバージョニング規約 に従い、OSGi メタデータを提供し、Apache 2.0 ライセンスを使用しています。 ダウンロード cron-utils は Maven central リポジトリで利用できます。 root@kitploit: com.cronutils cron-utils 9.2.1 Android 開発者の方へ: cron-utils...

Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 2.2.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...

CVE-2021-41269

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

CVE-2021-41269 Unauthenticated remote code injection in cron-utils

cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...

CVE-2021-41269

CVE-2021-41269 affects cron-utils, a Java library for parsing and migrating cron expressions. The issue is a template injection flaw in cron-utils that enables an attacker to inject arbitrary Java EL expressions, leading to unauthenticated remote code execution. The vulnerability affects versions...