~ / search / GHSA-xjp4-hw94-mvp5

GHSA-xjp4-hw94-mvp5

Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-29131

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.commons:commons-configuration2 >= 2.0, < 2.10.1 2.10.1

Details

As written in the advisory (Markdown source, shown as plain text).

This Out-of-bounds Write vulnerability in Apache Commons Configuration affects Apache Commons Configuration: from 2.0 before 2.10.1. User can see this as a 'StackOverflowError' when adding a property in 'AbstractListDelimiterHandler.flattenIterator()'. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.