CVE-2020-1953
1 advisory.
Maven/org.apache.commons:commons-configuration2 CVE-2020-1953: critical 10, EPSS 6.32%
Remote code execution in Apache Commons Configuration
Action: Upgrade org.apache.commons:commons-configuration2 to 2.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2 | 2.7 | - |
Fixed versions
| 2.7 |
Sources
- osv: GHSA-7qx4-pp76-vrqh
- https://nvd.nist.gov/vuln/detail/CVE-2020-1953
- https://github.com/apache/commons-configuration/commit/add7375cf37fd316d4838c6c56b054fc293b4641
- https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600@%3Cannounce.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r16a2e949e35780c8974cf66104e812410f3904f752df6b66bf292269@%3Ccommits.servicecomb.apache.org%3E
- https://lists.apache.org/thread.html/rde2186ad6ac0d6ed8d51af7509244adcf1ce0f9a3b7e1d1dd3b64676@%3Ccommits.camel.apache.org%3E
- https://www.oracle.com/security-alerts/cpuoct2020.html
CVE-2020-1953 · published · modified · JSON