apache/maven: The latest CVE Vulnerabilities and Exploits for Penetration Test
apache/maven Vulnerability Summary Vendor name: apache Product name: maven Total vulnerabilities: 2 (as 2023-05-04) apache/maven Vulnerability List CVE-2021-26291: Apache Maven will follow repositories that are defined in a dependency’s Project Object Model… Published: 2021-04-23T15:15:00 Last Modified: 2021-10-20T14:35:00
Summary
Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository.