- CVE ID
- sonatype-2024-3350
- CWE
- N/A
- CVE Description
- commons-collections - Uncontrolled Recursion
- Published
- Aug 13, 2024
- CVSS Score & Severity
8.7High
- CVSS Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS Score
- 0%
- KEV Status
Not in KEV Catalog: No known exploits
- Vulnerable Methods
org/apache/commons/collections/list/SetUniqueList.add(ILjava/lang/Object;)VJVMVulnerable params: 1
org/apache/commons/collections4/list/SetUniqueList.add(ILjava/lang/Object;)VJVMVulnerable params: 1
- Source
- Sonatype