CC
Product
Commons Configuration
6
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 3Low 0
Watch
Add Commons Configuration to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1953 | 10.0 | Mar 13 | Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements Affected: 2.2; 2.3; 2.4; 2.5; 2.6 |
| CVE-2022-33980 | 9.8 | Jul 6 | Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded Affected: 2.4 before 2.8 |
Showing 2