VDB

BDU%3A2024-01622

BDU%3A2024-01622 PUBLISHED CVSS 4 MEDIUM

Уязвимость библиотеки codehaus-plexus фреймворка Apache Maven, связана с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0
4

Affected Products

VendorProductVersions
Red Hat Inc., Сообщество свободного программного обеспечения, Novell Inc., Codehaus, Elastic NVRed Hat Enterprise Linux, Red Hat JBoss Fuse, Debian GNU/Linux, Red Hat Software Collections, Red Hat Single Sign-On, Red Hat JBoss Data Grid, SUSE Linux Enterprise Module for Development Tools, A-MQ Clients, Red Hat Process Automation, Red Hat build of Quarkus, Red Hat Integration Service Registry, Red Hat Integration Camel Quarkus, Red Hat Data Grid, Red Hat JBoss Fuse Service Works, Red Hat JBoss Enterprise Application Platform Expansion Pack, SUSE Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Manager Retail Branch Server, Red Hat Integration Change Data Capture, SUSE Linux Enterprise Real Time, SUSE Linux Enterprise Server Business Critical Linux, Decision Manager, Red Hat Integration Camel for Spring Boot, Red Hat JBoss A-MQ, Red Hat JBoss Enterprise Application Platform, Red Hat support for Spring Boot, Red Hat A-MQ Online, Plexus, Red Hat Integration Camel K, Red Hat JBoss Web Server, Logstash, Red Hat Process Automation Manager

Timeline

  • Feb 28, 2024 CVE Published
  • Mar 21, 2024 CVE Updated
  • Mar 19, 2026 Distribution Patch

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›