Lucene search
PRIOn knowledge basePRION:CVE-2022-29599HistoryMay 23, 2022 - 11:16 a.m.
Design/Logic Flaw
2022-05-2311:16:00
PRIOn knowledge base
www.prio-n.com
12
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| maven_shared_utils | lt | 3.3.3 | |
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 |
Related
github
github
Command injection in Apache Maven maven-shared-utils
2022-05-24 00:01:49
oraclelinux
oraclelinux
maven-shared-utils security update
2022-04-29 00:00:00
maven:3.5 security update
2022-06-01 00:00:00
maven:3.6 security update
2022-06-01 00:00:00
cve
cve
CVE-2022-29599
2022-05-23 11:16:10
nessus
nessus
Debian DSA-5242-1 : maven-shared-utils - security update
2022-09-29 00:00:00
Amazon Linux 2023 : maven-shared-utils, maven-shared-utils-javadoc (ALAS2023-2023-077)
2023-03-21 00:00:00
RHEL 7 : rh-maven36-maven-shared-utils (RHSA-2022:1662)
2022-05-02 00:00:00
osv
osv
maven-shared-utils - security update
2022-06-26 00:00:00
Important: maven:3.5 security update
2022-05-30 11:39:15
Important: maven:3.6 security update
2022-05-30 11:39:17
openvas
openvas
Debian: Security Advisory (DLA-3059-1)
2022-06-30 00:00:00
Fedora: Security Advisory for maven-shared-utils (FEDORA-2022-5d6aaab56e)
2022-05-09 00:00:00
Debian: Security Advisory (DLA-3086-1)
2022-08-30 00:00:00
almalinux
almalinux
Important: maven:3.5 security update
2022-05-30 11:39:15
Important: maven:3.6 security update
2022-05-30 11:39:17
redhat
redhat
(RHSA-2022:1662) Important: rh-maven36-maven-shared-utils security update
2022-05-02 07:48:12
(RHSA-2022:1541) Important: maven-shared-utils security update
2022-04-26 09:54:25
cnvd
cnvd
Apache Maven Command Injection Vulnerability
2022-04-28 00:00:00
veracode
veracode
OS Command Injection
2022-05-24 06:21:27
ubuntu
ubuntu
Apache Maven Shared Utils vulnerability
2024-04-11 00:00:00
f5
f5
K97399672 : Apache Maven vulnerability CVE-2022-29599
2022-06-02 00:00:00
ubuntucve
ubuntucve
CVE-2022-29599
2022-05-23 00:00:00
cvelist
cvelist
CVE-2022-29599 Commandline class shell injection vulnerabilities
2022-05-23 10:25:10
fedora
fedora
[SECURITY] Fedora 34 Update: maven-shared-utils-3.2.1-0.9.fc34
2022-05-08 02:04:08
debian
debian
[SECURITY] [DLA 3059-1] maven-shared-utils security update
2022-06-29 10:49:00
[SECURITY] [DSA 5242-1] maven-shared-utils security update
2022-09-28 13:04:18
[SECURITY] [DLA 3086-1] maven-shared-utils security update
2022-08-29 12:49:12
rocky
rocky
maven:3.5 security update
2022-05-30 11:39:15
maven:3.6 security update
2022-05-30 11:39:17
nvd
nvd
CVE-2022-29599
2022-05-23 11:16:10
redhatcve
redhatcve
CVE-2022-29599
2022-04-25 12:22:15
amazon
amazon
Critical: maven-shared-utils
2022-05-04 01:01:00
debiancve
debiancve
CVE-2022-29599
2022-05-23 11:16:10
qualysblog
qualysblog
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
Oracle Patch Tuesday, October 2023 Security Update Review
2023-10-18 17:11:20
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00