SLES 15 — maven — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🔴 Critical ⏱ 15–90 min Last verified: 23 July 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29599 CVE-2021-26291 CVE-2020-13956 Upstream summary: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell […]