~ / search / GHSA-p83q-99rc-vfmv

GHSA-p83q-99rc-vfmv

Code injection in Duke

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-39013

Packages

EcosystemPackageAffectedFixed in
Maven no.priv.garshol.duke:duke <= 1.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.

References

External links from the advisory. They lead to third-party sites.