Description:

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline 
class can emit double-quoted strings without proper escaping, allowing shell 
injection attacks.

This issue is being tracked as MSHARED-297

References:

https://issues.apache.org/jira/browse/MSHARED-297
https://github.com/apache/maven-shared-utils/pull/40

Reply via email to