CVE-2024-29131CWE-787

Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

High · published March 21, 2024

CVSS v3.1
7.3
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.

Users are recommended to upgrade to version 2.10.1, which fixes the issue.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.02054 · 81.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-03-21T09:07Z
EPSS history
Timeline
  • 21 MAR 09:07Z
    Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
    cvelistv5