Submeter #615728: Apache Commons Configuration2 2.* Remote Code Executioninformação

TítuloApache Commons Configuration2 2.* Remote Code Execution
DescriçãoApache Commons Configuration2 contains a remote code execution vulnerability when processing XPath expressions due to its use of the Apache Commons JXPath component, which has security flaws. This vulnerability is designated as CVE-2022-41852. Attackers can achieve remote code execution by crafting malicious XPath expressions.
Fonte⚠️ https://github.com/zast-ai/vulnerability-reports/blob/main/Apache/CommonsConfiguration2/RCE_report.md
Utilizador
 ZAST.AI (UID 87884)
Submissão14/07/2025 11h48 (há 1 Ano)
Moderação14/07/2025 14h21 (3 hours later)
EstadoDuplicado
Entrada VulDB210187 [JXPath até 1.3 JXPathContext Negação de Serviço]
Pontos0

Do you know our Splunk app?

Download it now for free!