CVEFinder.io

CVE-2024-29131

⚠ī¸ high
🔍 Scan for this CVE
Summary

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

CVSS Score
7.3
High
EPSS Score
0.2
Exploit Probability
Published Date
2024-03-21
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 55.3% of all 338,292 vulnerabilities in our database.

#151,238
Above average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Mar 29, 2024
🔍 Exploitation Status
None
No known exploits
⚙ī¸ Automatable
YES
Can be exploited automatically
đŸ’Ĩ Technical Impact
Partial
Limited system impact
🏆 Discovered By
Bob Marinier
SSVC data provided by CISA
Last Modified 2025-05-01
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE IDs (Weakness Types)
CWE-787

đŸ“Ļ Affected Products 5

Vendor Product Status Affected Versions
fedoraproject fedora Affected
v39
fedoraproject fedora Affected
v40
netapp snapcenter Affected
v-
apache commons_configuration Affected
≥ 2.0 < 2.10.1
netapp ontap_tools Affected
v10

🔗 References 5

http://www.openwall.com/lists/oss-security/2024/03/20/4
Mailing List Third Party Advisory
https://lists.apache.org/thread/03nzzzjn4oknyw5y0871...
Mailing List Vendor Advisory
https://lists.fedoraproject.org/archives/list/packag...
Third Party Advisory
https://lists.fedoraproject.org/archives/list/packag...
Third Party Advisory
https://security.netapp.com/advisory/ntap-20241213-0...
Third Party Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-54230 ⚠ī¸ high 7.0 0.1 A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts wr... 2026-06-13
CVE-2026-54231 đŸ”ļ medium 5.5 0.1 A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script... 2026-06-13
CVE-2026-45205 đŸ”ļ medium 5.3 0.1 Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Config... 2026-05-14
CVE-2026-35093 ⚠ī¸ high 8.8 0.2 A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or ... 2026-04-01
CVE-2026-35094 ℹī¸ low 3.3 0.0 A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can expl... 2026-04-01
CVE-2025-46392 đŸ”ļ medium 6.5 0.4 Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Ap... 2025-05-09
These CVEs affect the same products