~ / search / GHSA-9w38-p64v-xpmv

GHSA-9w38-p64v-xpmv

Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-29133

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.commons:commons-configuration2 >= 2.0, < 2.10.1 2.10.1

Details

As written in the advisory (Markdown source, shown as plain text).

This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' calling 'ListDelimiterHandler.flatten(Object, int)' with a cyclical object tree. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.