Maven/org.apache.jmeter:ApacheJMeter CVE-2019-0187: critical 9.8, EPSS 2.64%
Unauthenticated Remote Code Execution in Apache JMeter
Action: Upgrade org.apache.jmeter:ApacheJMeter to 5.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1 | - |
Fixed versions
| 5.1 |
Sources
- osv: GHSA-wg37-7mrv-cfwm
- https://nvd.nist.gov/vuln/detail/CVE-2019-0187
- https://github.com/advisories/GHSA-wg37-7mrv-cfwm
- http://mail-archives.apache.org/mod_mbox/jmeter-user/201903.mbox/%3CCAH9fUpaUQaFbgY1Zh4OvKSL4wdvGAmVt%2Bn4fegibDoAxK5XARw%40mail.gmail.com%3E
- http://www.securityfocus.com/bid/107219
CVE-2019-0187 · published · modified · JSON