RHEL 8 : maven:3.6 (RHSA-2022:4797)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4797 advisory. The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven. Security Fixes: maven-shared-utils:...

OS Command Injection

maven-shared-utils is vulnerable to OS command injection. The vulnerability exists due to the use of double-quoted strings without proper escaping which allows an attacker to execute shell commands...

Command injection in Apache Maven maven-shared-utils

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

GHSA-RHGR-952R-6P8Q Command injection in Apache Maven maven-shared-utils

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

com.github.bjlhx15:xgen (1.0.1), com.github.olegzzz:bom-search-maven-plugin (>=1.3, <=1.5) +21 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (0.1)

org.apache.maven.shared:maven-shared-utils MAVEN version 0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven.shared:maven-shared-utils and may be impacted: - com.github.bjlhx15:xgen 1.0.1 - com.github.olegzzz:bom-search-maven-plugin...

cn.fyupeng:rpc-core (>=1.0.0, <=1.0.1), com.astutebits:jsquint-maven-plugin (>=0.1.0, <=0.3.0) +61 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (0.3)

org.apache.maven.shared:maven-shared-utils MAVEN version 0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven.shared:maven-shared-utils and may be impacted: - cn.fyupeng:rpc-core =1.0.0, =0.1.0, =1.0.1, =1.0, =1.5.0.1, =6.2.4, =0.2.1,...

au.net.causal.maven.plugins:docker-image-archive-maven-plugin (1.0), cn.zvo.log:log-datasource-aliyunsls (>=1.0, <=1.0.1) +277 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (0.6)

org.apache.maven.shared:maven-shared-utils MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven.shared:maven-shared-utils and may be impacted: - au.net.causal.maven.plugins:docker-image-archive-maven-plugin 1.0 -...

com.e-gineering:gitflow-helper-maven-plugin (>=2.0.0, <=2.2.0), com.github.cukedoctor:cukedoctor-converter (>=0.6.0, <=0.6.2) +14 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (0.8)

org.apache.maven.shared:maven-shared-utils MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven.shared:maven-shared-utils and may be impacted: - com.e-gineering:gitflow-helper-maven-plugin =2.0.0, =0.6.0, =0.6.0, =0.6.0,...

com.github.cafeduke:jreportng (1.0), com.github.cukedoctor:cukedoctor-converter (0.7.0) +14 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (0.9)

org.apache.maven.shared:maven-shared-utils MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven.shared:maven-shared-utils and may be impacted: - com.github.cafeduke:jreportng 1.0 - com.github.cukedoctor:cukedoctor-converte...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +4178 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (>=3.0.0, <=3.2.1)

org.apache.maven.shared:maven-shared-utils MAVEN version =3.0.0, =1.0.0, =2.0.2.release, =2.0.0.release, =1.0.0, =1.0.0, =4.1.0, =4.0.0-beta.1, =3.5.6, =3.5.6, =1.0, =3.3 - au.net.causal.maven.plugins:browserbox-maven-plugin 1.0 and more Source cves: CVE-2022-29599 Source advisory:...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

DEBIAN-CVE-2022-29599

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

CVE-2022-29599

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

CVE-2022-29599

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

CVE-2022-29599

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

CVE-2022-29599 Commandline class shell injection vulnerabilities

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

CVE-2022-29599

CVE-2022-29599 affects the Maven project’s shared utilities: maven-shared-utils, prior to version 3.3.3. The issue lies in the Commandline class, which can emit double-quoted strings without proper escaping, enabling shell injection attacks. The vulnerability is reported with high severities (CVS...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +4598 more potentially affected by CVE-2022-29599 via org.apache.maven.shared:maven-shared-utils (>=0.1, <=3.2.1)

org.apache.maven.shared:maven-shared-utils MAVEN version =0.1, =1.0.0, =2.0.2.release, =2.0.0.release, =1.0.0, =1.0.0, =4.1.0, =4.0.0-beta.1, =3.5.6, =3.5.6, =1.0, =3.3 - au.net.causal.maven.plugins:browserbox-maven-plugin 1.0 and more Source cves: CVE-2022-29599 Source advisory: MEND:CVE-2022-29...

CVE-2022-29599: Improper Encoding or Escaping of Output

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

RHEL 8 : maven:3.5 (RHSA-2022:4699)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4699 advisory. The Apache Maven Shared Utils project aims to be an improved functional replacement for plexus-utils in Maven. Security Fixes: maven-shared-utils:...