In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade geronimo-annotationUpgrade jsoupUpgrade sisu-injectUpgrade maven-wagon-http-sharedUpgrade maven-resolverUpgrade maven-wagon-provider-apiUpgrade httpcomponents-coreUpgrade atinjectUpgrade maven-resolver-transport-wagonUpgrade plexus-classworldsUpgrade jboss-interceptors-1.2-apiUpgrade plexus-interpolationUpgrade maven-resolver-utilUpgrade maven-resolver-implUpgrade guava20Upgrade glassfish-el-apiUpgrade maven-resolver-spiUpgrade mavenUpgrade jansi-nativeUpgrade plexus-utilsUpgrade google-guiceUpgrade guavaUpgrade aopallianceUpgrade maven-wagon-httpUpgrade maven-shared-utilsUpgrade httpcomponents-clientUpgrade maven-openjdk8Upgrade sisuUpgrade apache-commons-cliUpgrade apache-commons-codecUpgrade hawtjni-runtimeUpgrade maven-openjdk11Upgrade maven-wagonUpgrade maven-libUpgrade jcl-over-slf4jUpgrade plexus-cipherUpgrade slf4jUpgrade jansiUpgrade maven-resolver-apiUpgrade maven-wagon-fileUpgrade cdi-apiUpgrade apache-commons-ioUpgrade plexus-containers-component-annotationsUpgrade apache-commons-lang3Upgrade maven-resolver-connector-basicUpgrade apache-commons-loggingUpgrade maven-openjdk17Upgrade plexus-sec-dispatcherUpgrade sisu-plexusUpgrade jsr-305 | Jun 7, 2022 | May 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade maven-shared-utilsUpgrade maven-shared-utils-javadoc | Jul 4, 2022 | May 23, 2022 |
| Centos_linux | — | Upgrade maven-resolver-utilUpgrade guava20Upgrade jboss-interceptors-1.2-apiUpgrade maven-shared-utilsUpgrade sisu-plexusUpgrade maven-resolver-implUpgrade maven-resolver-transport-wagonUpgrade guavaUpgrade plexus-cipherUpgrade httpcomponents-clientUpgrade jansiUpgrade cdi-apiUpgrade maven-openjdk17Upgrade maven-shared-utils-javadocUpgrade maven-wagonUpgrade slf4jUpgrade glassfish-el-apiUpgrade maven-wagon-provider-apiUpgrade plexus-utilsUpgrade aopallianceUpgrade apache-commons-codecUpgrade sisuUpgrade plexus-sec-dispatcherUpgrade maven-wagon-fileUpgrade maven-wagon-http-sharedUpgrade maven-resolver-spiUpgrade jansi-nativeUpgrade plexus-containers-component-annotationsUpgrade maven-wagon-httpUpgrade mavenUpgrade maven-libUpgrade atinjectUpgrade hawtjni-runtimeUpgrade maven-resolver-connector-basicUpgrade httpcomponents-coreUpgrade maven-openjdk8Upgrade plexus-interpolationUpgrade sisu-injectUpgrade maven-resolver-apiUpgrade maven-resolverUpgrade jsoupUpgrade jcl-over-slf4jUpgrade apache-commons-loggingUpgrade apache-commons-lang3Upgrade apache-commons-ioUpgrade apache-commons-cliUpgrade maven-openjdk11Upgrade geronimo-annotationUpgrade google-guiceUpgrade jsr-305Upgrade plexus-classworlds | May 2, 2022 | Apr 26, 2022 |
| Debian | — | Upgrade maven-shared-utils | Jun 28, 2022 | May 23, 2022 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 35904051 for version 14.1.1.0.0. | Oct 19, 2023 | May 23, 2022 |
| Oracle_linux | — | Upgrade apache-commons-codecUpgrade maven-shared-utils-javadocUpgrade hawtjni-runtimeUpgrade sisuUpgrade maven-resolver-connector-basicUpgrade jcl-over-slf4jUpgrade slf4jUpgrade maven-libUpgrade apache-commons-lang3Upgrade plexus-sec-dispatcherUpgrade httpcomponents-coreUpgrade maven-openjdk17Upgrade maven-openjdk11Upgrade jboss-interceptors-1.2-apiUpgrade cdi-apiUpgrade plexus-containers-component-annotationsUpgrade maven-wagon-fileUpgrade sisu-injectUpgrade glassfish-el-apiUpgrade apache-commons-ioUpgrade maven-resolver-transport-wagonUpgrade maven-resolver-implUpgrade jansiUpgrade plexus-utilsUpgrade maven-wagon-provider-apiUpgrade plexus-cipherUpgrade maven-wagonUpgrade jsr-305Upgrade httpcomponents-clientUpgrade maven-wagon-httpUpgrade maven-wagon-http-sharedUpgrade maven-resolver-apiUpgrade guavaUpgrade maven-openjdk8Upgrade atinjectUpgrade aopallianceUpgrade sisu-plexusUpgrade apache-commons-cliUpgrade apache-commons-loggingUpgrade geronimo-annotationUpgrade plexus-classworldsUpgrade guava20Upgrade google-guiceUpgrade plexus-interpolationUpgrade maven-resolver-spiUpgrade maven-resolver-utilUpgrade jsoupUpgrade maven-shared-utilsUpgrade jansi-nativeUpgrade maven-resolverUpgrade maven | Apr 30, 2022 | May 29, 2020 |
| Redhat Openshift | — | Upgrade jenkins-2-plugins | Jan 5, 2023 | May 29, 2020 |
| Redhat_linux | — | Upgrade guava20Upgrade maven-resolver-spiUpgrade sisu-injectUpgrade maven-wagon-httpUpgrade jboss-interceptors-1.2-apiUpgrade atinjectUpgrade maven-wagon-provider-apiUpgrade plexus-containers-component-annotationsUpgrade httpcomponents-clientUpgrade maven-shared-utilsUpgrade maven-resolverUpgrade apache-commons-codecUpgrade google-guiceUpgrade aopallianceUpgrade plexus-utilsUpgrade maven-resolver-transport-wagonUpgrade jansiUpgrade jansi-nativeUpgrade apache-commons-cliUpgrade slf4jUpgrade httpcomponents-coreUpgrade apache-commons-loggingUpgrade jsoupUpgrade plexus-interpolationUpgrade maven-resolver-utilUpgrade guavaUpgrade plexus-classworldsUpgrade maven-openjdk8Upgrade maven-openjdk17Upgrade maven-wagon-http-sharedUpgrade maven-libUpgrade plexus-sec-dispatcherUpgrade maven-resolver-implUpgrade maven-openjdk11Upgrade maven-resolver-apiUpgrade hawtjni-runtimeUpgrade jsr-305Upgrade apache-commons-lang3Upgrade mavenUpgrade glassfish-el-apiUpgrade cdi-apiUpgrade geronimo-annotationUpgrade maven-shared-utils-javadocUpgrade sisuUpgrade apache-commons-ioUpgrade plexus-cipherUpgrade maven-wagonUpgrade sisu-plexusUpgrade jcl-over-slf4jUpgrade maven-resolver-connector-basicUpgrade maven-wagon-file | May 2, 2022 | Apr 26, 2022 |
| Rocky_linux | — | Upgrade jansi-native | Mar 12, 2024 | May 23, 2022 |
| Suse | — | Upgrade spec-version-maven-plugin-javadocUpgrade maven-clean-plugin-javadocUpgrade maven-wagon-ssh-externalUpgrade maven-javadoc-plugin-javadocUpgrade maven-remote-resources-pluginUpgrade maven-file-management-javadocUpgrade os-maven-pluginUpgrade maven-doxia-module-foUpgrade maven-archiverUpgrade maven-file-managementUpgrade maven-plugin-tools-antUpgrade maven-shared-incrementalUpgrade maven-resolver-utilUpgrade maven-jar-pluginUpgrade maven-artifact-managerUpgrade maven-plugin-testingUpgrade maven-resolver-transport-classpathUpgrade maven-doxia-module-aptUpgrade maven-doxia-coreUpgrade maven-source-pluginUpgrade maven-doxia-sitetools-javadocUpgrade maven-enforcer-apiUpgrade maven-enforcerUpgrade maven-doxia-sink-apiUpgrade maven-dependency-plugin-javadocUpgrade maven-assembly-plugin-javadocUpgrade maven-plugin-plugin-javadocUpgrade maven-javadoc-pluginUpgrade string-template-maven-pluginUpgrade maven-plugin-testing-toolsUpgrade maven-wagon-http-lightweightUpgrade maven-plugin-testing-harnessUpgrade maven-surefire-plugins-javadocUpgrade maven-assembly-pluginUpgrade javacc-maven-plugin-javadocUpgrade maven-mapping-javadocUpgrade maven-plugin-tools-apiUpgrade maven-surefireUpgrade modello-maven-pluginUpgrade gmavenplus-pluginUpgrade maven-common-artifact-filtersUpgrade maven-dependency-pluginUpgrade exec-maven-plugin-javadocUpgrade javacc-maven-pluginUpgrade maven-plugin-tools-javadocUpgrade maven-modelUpgrade maven-reporting-api-javadocUpgrade paranamer-maven-pluginUpgrade spec-version-maven-pluginUpgrade maven-antrun-plugin-javadocUpgrade maven-wagon-fileUpgrade maven-plugin-plugin-bootstrapUpgrade maven-wagon-javadocUpgrade maven-install-plugin-javadocUpgrade maven-resolver-transport-httpUpgrade maven-plugin-testing-javadocUpgrade maven-resolver-implUpgrade maven-resources-pluginUpgrade maven-enforcer-pluginUpgrade maven-shared-ioUpgrade maven-clean-pluginUpgrade maven-plugin-build-helper-javadocUpgrade maven-shared-incremental-javadocUpgrade maven-shared-utilsUpgrade maven-doxia-module-rtfUpgrade maven-surefire-pluginUpgrade maven-profileUpgrade maven-surefire-report-parserUpgrade maven-archiver-javadocUpgrade maven-plugin-bundleUpgrade maven-localUpgrade maven-artifact-transfer-javadocUpgrade maven-doxia-logging-apiUpgrade maven-doxia-module-twikiUpgrade maven-wagon-http-sharedUpgrade maven-failsafe-pluginUpgrade maven-plugin-bundle-javadocUpgrade maven-projectUpgrade maven-common-artifact-filters-javadocUpgrade maven-dependency-tree-javadocUpgrade maven-reporting-apiUpgrade maven-plugin-annotationsUpgrade maven-resolver-transport-wagonUpgrade xml-maven-pluginUpgrade maven-doxia-javadocUpgrade maven-resolver-transport-fileUpgrade maven-plugin-tools-javaUpgrade maven-plugin-build-helperUpgrade maven-remote-resources-plugin-javadocUpgrade maven-monitorUpgrade maven-test-toolsUpgrade maven-jar-plugin-javadocUpgrade maven-jar-plugin-bootstrapUpgrade maven-surefire-provider-junit5Upgrade maven-doxia-sitetoolsUpgrade maven-resolver-connector-basicUpgrade os-maven-plugin-javadocUpgrade maven-doxia-test-docsUpgrade maven-plugin-tools-generatorsUpgrade maven-surefire-report-plugin-bootstrapUpgrade string-template-maven-plugin-javadocUpgrade maven-doxia-module-latexUpgrade maven-surefire-provider-testngUpgrade maven-plugin-tools-modelUpgrade maven-wagon-ssh-commonUpgrade maven-surefire-provider-junit5-javadocUpgrade maven-resolver-apiUpgrade maven-plugin-tools-annotationsUpgrade maven-javadocUpgrade maven-shared-io-javadocUpgrade maven-resolver-spiUpgrade maven-invokerUpgrade maven-failsafe-plugin-bootstrapUpgrade bnd-maven-plugin-javadocUpgrade maven-compiler-plugin-bootstrapUpgrade maven-compiler-plugin-javadocUpgrade maven-surefire-javadocUpgrade maven-surefire-provider-junitUpgrade maven-artifact-transferUpgrade mavenUpgrade maven-plugin-tools-beanshellUpgrade maven-settingsUpgrade maven-doxia-module-fmlUpgrade maven-artifact-resolver-javadocUpgrade maven-dependency-analyzer-javadocUpgrade maven-install-pluginUpgrade maven-plugin-registryUpgrade hawtjni-maven-pluginUpgrade maven-source-plugin-javadocUpgrade maven-plugin-descriptorUpgrade maven-script-antUpgrade maven2-javadocUpgrade maven-enforcer-javadocUpgrade maven-resolverUpgrade maven-artifactUpgrade maven-resolver-named-locksUpgrade exec-maven-pluginUpgrade hawtjni-maven-plugin-javadocUpgrade maven-libUpgrade maven-wagon-provider-apiUpgrade maven-surefire-plugin-bootstrapUpgrade xml-maven-plugin-javadocUpgrade maven-script-beanshellUpgrade maven-compiler-pluginUpgrade antlr4-maven-pluginUpgrade maven-verifier-javadocUpgrade maven-javadoc-plugin-bootstrapUpgrade maven-plugin-pluginUpgrade maven-toolchainUpgrade maven-filtering-javadocUpgrade maven-doxia-module-confluenceUpgrade maven-enforcer-rulesUpgrade maven-verifierUpgrade maven-antrun-pluginUpgrade tesla-polyglot-maven-pluginUpgrade bnd-maven-pluginUpgrade maven-mappingUpgrade maven-dependency-treeUpgrade maven-doxia-module-xdocUpgrade maven-resources-plugin-bootstrapUpgrade maven-filteringUpgrade maven-wagon-ftpUpgrade maven-doxia-module-xhtmlUpgrade maven-doxia-module-docbook-simpleUpgrade maven-dependency-analyzerUpgrade maven-artifact-resolverUpgrade maven-invoker-javadocUpgrade maven-wagon-sshUpgrade maven-resolver-test-utilUpgrade modello-maven-plugin-javadocUpgrade maven-resources-plugin-javadocUpgrade maven-surefire-report-pluginUpgrade maven-shared-utils-javadocUpgrade maven-resolver-javadocUpgrade maven-doxia-module-xhtml5Upgrade maven-wagon-httpUpgrade gmavenplus-plugin-javadoc | Mar 20, 2023 | May 23, 2022 |
| Ubuntu | — | Upgrade libmaven-shared-utils-java (Ubuntu Pro)Upgrade libmaven-shared-utils-java | Apr 12, 2024 | May 23, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub