CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-34112

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message` parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection vulnerability due to string interpolation. No exploitation has been reported. This issue has been addressed in version 1.5.9. Users of JavaCPP Presets are advised to upgrade as a precaution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.02

EPSS Ranking 82.9%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2023-34112

Bytedeco » Javacpp Presets » Version: N/A

cpe:2.3:a:bytedeco:javacpp_presets:-
Bytedeco » Javacpp Presets » Version: 0.10

cpe:2.3:a:bytedeco:javacpp_presets:0.10
Bytedeco » Javacpp Presets » Version: 0.11

cpe:2.3:a:bytedeco:javacpp_presets:0.11
Bytedeco » Javacpp Presets » Version: 0.6

cpe:2.3:a:bytedeco:javacpp_presets:0.6
Bytedeco » Javacpp Presets » Version: 0.7

cpe:2.3:a:bytedeco:javacpp_presets:0.7
Bytedeco » Javacpp Presets » Version: 0.8

cpe:2.3:a:bytedeco:javacpp_presets:0.8
Bytedeco » Javacpp Presets » Version: 0.9

cpe:2.3:a:bytedeco:javacpp_presets:0.9
Bytedeco » Javacpp Presets » Version: 1.0

cpe:2.3:a:bytedeco:javacpp_presets:1.0
Bytedeco » Javacpp Presets » Version: 1.1

cpe:2.3:a:bytedeco:javacpp_presets:1.1
Bytedeco » Javacpp Presets » Version: 1.2

cpe:2.3:a:bytedeco:javacpp_presets:1.2
Bytedeco » Javacpp Presets » Version: 1.3

cpe:2.3:a:bytedeco:javacpp_presets:1.3
Bytedeco » Javacpp Presets » Version: 1.4

cpe:2.3:a:bytedeco:javacpp_presets:1.4
Bytedeco » Javacpp Presets » Version: 1.4.1

cpe:2.3:a:bytedeco:javacpp_presets:1.4.1
Bytedeco » Javacpp Presets » Version: 1.4.2

cpe:2.3:a:bytedeco:javacpp_presets:1.4.2
Bytedeco » Javacpp Presets » Version: 1.4.3

cpe:2.3:a:bytedeco:javacpp_presets:1.4.3
Bytedeco » Javacpp Presets » Version: 1.4.4

cpe:2.3:a:bytedeco:javacpp_presets:1.4.4
Bytedeco » Javacpp Presets » Version: 1.5

cpe:2.3:a:bytedeco:javacpp_presets:1.5
Bytedeco » Javacpp Presets » Version: 1.5.1

cpe:2.3:a:bytedeco:javacpp_presets:1.5.1
Bytedeco » Javacpp Presets » Version: 1.5.2

cpe:2.3:a:bytedeco:javacpp_presets:1.5.2
Bytedeco » Javacpp Presets » Version: 1.5.3

cpe:2.3:a:bytedeco:javacpp_presets:1.5.3
Bytedeco » Javacpp Presets » Version: 1.5.4

cpe:2.3:a:bytedeco:javacpp_presets:1.5.4
Bytedeco » Javacpp Presets » Version: 1.5.5

cpe:2.3:a:bytedeco:javacpp_presets:1.5.5
Bytedeco » Javacpp Presets » Version: 1.5.6

cpe:2.3:a:bytedeco:javacpp_presets:1.5.6
Bytedeco » Javacpp Presets » Version: 1.5.7

cpe:2.3:a:bytedeco:javacpp_presets:1.5.7
Bytedeco » Javacpp Presets » Version: 1.5.8

cpe:2.3:a:bytedeco:javacpp_presets:1.5.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-34112

Products

Pricing

Contact Us