CVE-2021-29425
Aliases:GHSA-gwrp-pvrq-jmwvDEBIAN-CVE-2021-29425CGA-2h7r-v9p6-hmmwCGA-5ggp-w5cc-w96qCGA-23w4-9qcv-m78rCGA-26cf-8mgv-cp3gCGA-27gf-hr7q-8rxgCGA-2j62-37xr-qmqwCGA-2x2j-42ch-c47cCGA-3779-2p9p-q8v2CGA-38r7-3cvm-7wxrCGA-3hff-cv6w-366cCGA-3v8q-r226-5xjmCGA-424h-gffm-8h32CGA-42rh-phch-jqqxCGA-45j8-cvrm-9pvjCGA-4cqm-9p4v-2h2mCGA-4jfj-q8cc-92vxCGA-4jx4-h6v2-hh25CGA-4mjh-756c-q79gCGA-4p26-r8f6-rhxrCGA-4phq-3cq4-fhcjCGA-4x2j-698v-6f7xCGA-4xvh-wh3j-w3v8CGA-5472-5p6x-f4c6CGA-59r3-pwx6-7h8cCGA-5p69-q6cx-cqw8CGA-62rx-3jp6-xr77CGA-66x3-qf5j-jgj2CGA-672f-rr2m-q84vCGA-68c8-f6qq-8fr9CGA-6h9c-g58m-qgf2CGA-6jqx-9jw5-26fmCGA-6x5v-v7w6-993hCGA-6x9r-rh2m-7735CGA-7288-vjx9-mj9qCGA-7997-5p35-g9wpCGA-7j2f-c8jg-q54jCGA-7rwj-x2r6-rgx3CGA-8hc7-j44q-2f8hCGA-8prv-2f9q-jjgmCGA-8qcm-q69w-hwcqCGA-8v3r-2x3g-7x43CGA-8x9m-5q2x-x9fqCGA-8xpj-m3jc-m8fmCGA-94h9-xmxr-v258CGA-95j3-4mg3-pq97CGA-9f78-j2jf-cjv5CGA-c324-37pm-6746CGA-c34j-7vrq-qp9jCGA-c7r5-fwmv-79rcCGA-c943-7cp3-f69fCGA-c9gw-p4m4-f2wrCGA-chv7-xccm-hqv9CGA-cq4h-v3qg-2m7jCGA-f5xj-2wqj-8wm4CGA-fhw6-xvp9-6qgvCGA-fmgj-g46g-2pgwCGA-fr7p-pq74-rpq4CGA-g8w3-gmqj-37vxCGA-gcj3-frxm-j6wcCGA-ggh3-x25h-9645CGA-h8qh-h5v2-xq24CGA-hhp6-2pj6-fpr6CGA-hr2v-7c7c-h2j7CGA-hv33-8x33-49chCGA-j6mc-xxp5-6g98CGA-j7qh-9q79-hf5wCGA-j94q-r7gh-787mCGA-j9pm-7p73-6q27CGA-jf9c-rc86-pf28CGA-jhgc-gqx2-crq7CGA-jq8v-q554-cj2mCGA-jvp7-x9c4-chfvCGA-jvpj-v7ph-qg3rCGA-mhhx-95gw-c7q4CGA-mq28-857w-mq8pCGA-p2h6-6773-cf9mCGA-p75f-9r4j-9qghCGA-pg3j-g7vv-3976CGA-pj4p-rw59-cw7pCGA-pmc3-vjvj-4hfmCGA-q35q-c624-jr89CGA-q463-9p9v-23cmCGA-q696-jmp9-qfvpCGA-qg5f-mwwc-53pfCGA-qgqj-4r55-6x4fCGA-qpvx-37jm-7874CGA-r529-g229-hx47CGA-r594-f8v5-mh4mCGA-r9wq-8397-c55pCGA-rcpg-pppw-fv5pCGA-rp38-3m4v-5xvfCGA-v2c6-fjcf-986qCGA-v496-xrx4-gj3mCGA-v4p6-3x3q-fp6wCGA-vc76-ghgg-w435CGA-vf6r-825x-g2vvCGA-vfjh-jmjq-4v6fCGA-vgmx-jcq7-3ccfCGA-vmvm-v5ch-vxpqCGA-vrvj-qj4h-3667CGA-vw7j-9cxh-2g95CGA-vxj8-rrmj-xvw5CGA-w5vr-4vxg-c564CGA-w7qw-qwfj-5f47CGA-w8jj-qv9p-vq2mCGA-w8vg-6g6q-c5gjCGA-wf45-4mj2-46c7CGA-wfgm-5fr6-qj9hCGA-whw4-qj43-27g5CGA-wjv3-24f6-pc28CGA-24jm-52xq-fvc8CGA-3h54-qh34-6jm9CGA-487j-jv67-8qw8CGA-4p35-8fw7-fx43CGA-5pjr-3gj8-2j9jCGA-62x6-5j2m-hxxpCGA-76m2-7r9w-w5g2CGA-7742-7m2w-5cvjCGA-7gw7-rp6f-96mwCGA-7j66-j2gg-34v7CGA-87x7-5vvc-w97jCGA-9r23-wjg8-23hxCGA-9vf7-8xwm-gc4xCGA-9w5w-9c9q-fxrvCGA-c4wc-pwxf-334hCGA-crgf-fpgp-wqwfCGA-gvg4-h78q-6c53CGA-hcgj-v697-rmv8CGA-hwm7-jw7x-fh44CGA-hxgj-483j-9qxqCGA-m569-7rcm-xwfmCGA-mh8p-j3cc-232xCGA-pcpr-cj98-37pfCGA-qqqx-8v6j-prfqCGA-r769-5wmg-vp32CGA-r952-hgwr-22mvCGA-rr36-cr36-fpfqCGA-vv2r-pj9v-m7h8CGA-w9r7-9p6j-8h26CGA-wfpg-pxhw-fww3CGA-wjgp-vg9g-jpxxCGA-wwvv-wf2w-222wCGA-x3g8-73r8-vq8fCGA-x67h-jvxv-mfj6CGA-xgfg-j2q7-w65xCGA-xm64-76m3-gw4mCGA-xr46-qx2g-8rm4CGA-xvwv-x3mf-g693CGA-23fp-c83r-9q9gCGA-2m56-wc2v-wh8xCGA-2mh7-6wcg-xqrpCGA-2rhh-2ggx-rc69CGA-3363-jgfq-499xCGA-374g-3gg9-rqp5CGA-3fv8-5v29-6jxvCGA-3q7j-8qw4-j43wCGA-47fp-79cr-rq7hCGA-53v3-x23f-cm4mCGA-56q3-pvgv-6v77CGA-5gc6-m4vg-46qwCGA-6m84-wgpm-4h55CGA-6pw3-mp3c-h2q7CGA-6wc6-f3xc-g66hCGA-6wxj-gw7m-hpm7CGA-74wx-7qj3-5829CGA-7hv5-qp4p-284wCGA-822g-fc5x-xrc2CGA-853w-p73j-82v6CGA-879r-w7m5-r3jgCGA-8956-hf8j-rxcjCGA-9x8f-qmh7-7g88CGA-c4xx-m28r-x36pCGA-cr2v-rmfq-2qc5CGA-cvhp-5cjg-3g6rCGA-cw69-3937-4gg2CGA-f864-hq5p-7322CGA-ffrj-vc97-j27cCGA-g379-55cf-x599CGA-gfw6-p9pm-wp7gCGA-ghf8-9xc3-hh67CGA-gp67-6r27-3774CGA-gw3h-xx28-9738CGA-h583-f878-5gj6CGA-h5mg-3x42-77qvCGA-hqc5-3q9m-87wwCGA-hrcp-pq24-r7jpCGA-j8r8-j99w-mvfxCGA-jj3p-jp9h-j628CGA-jmrh-cr86-7355CGA-m4pj-774q-jg23CGA-mjhx-9v8w-4ppqCGA-p49h-fqc4-vppcCGA-p67q-fphm-g56gCGA-pf6q-p36v-38hcCGA-pp6g-8v82-72xjCGA-qg57-rxvw-7q74CGA-qwxw-h2hr-x7vrCGA-qx6j-v76m-4wh8CGA-qx73-xg48-549xCGA-r28c-65h3-fwx6CGA-rpj7-vjv3-h3ghCGA-rpqg-q5fv-ppjcCGA-rvfr-57vm-9vgwCGA-v77c-g8r5-jxmjCGA-vfgm-h8px-2j25CGA-vj85-229f-2mf3CGA-vmc3-mm2m-4c66CGA-vvx6-fhjc-58hmCGA-vxgh-xw9c-j28cCGA-w57w-8pjf-2w27CGA-w5jp-cfv7-j6j4CGA-wpvv-5fxx-62ffCGA-x296-wrpp-657jCGA-x7v7-h7rg-2m8gCGA-x7w8-9cx6-qg6vCGA-x8r8-58m9-ch4qCGA-23pf-cchp-5vgcCGA-26rq-j9f5-7r9fCGA-279g-wf34-2jgqCGA-28fc-73f7-9g4gCGA-443g-jj4w-3wfjCGA-4fh6-qw3p-hmq2CGA-4j6m-fmpq-rcxqCGA-56j3-x44g-hmwwCGA-5hrw-vpwh-f8frCGA-67v7-qwpq-g6qfCGA-6gw2-8h96-6fx6CGA-6q63-x2x9-5836CGA-74fc-7qxc-r62fCGA-76hh-j9qh-6hw6CGA-7fjm-q638-gfghCGA-84r2-6p48-r43vCGA-8mxj-rp8m-6324CGA-9p7c-63hw-48rgCGA-9vgg-x9f7-pgphCGA-c2wm-66fm-g388CGA-f332-w5xj-7ww7CGA-g375-cq5f-633mCGA-g796-548h-53g8CGA-gg5f-hjgg-m9rcCGA-h3gg-8r4f-mfjhCGA-hg24-q7h4-wp4wCGA-hqq7-36q4-ccm4CGA-hr22-465h-hfg3CGA-hvjc-g6p9-6wx4CGA-j4w3-qcxw-qq34CGA-j9qc-22c8-q29hCGA-jcw9-wvqv-c5r9CGA-jvfv-gw8g-rf2mCGA-m643-36mh-w465CGA-m8p4-6gpf-95rrCGA-mqxw-qq2g-jwjrCGA-mwgv-9722-3qx5CGA-p335-r286-vq6rCGA-p4xf-69j7-8q9rCGA-pv96-q68f-8mwpCGA-qghw-68mw-q9h2CGA-qw43-qcfm-f377CGA-r26v-p8qm-2gvxCGA-r79g-27g9-p6v6CGA-rhq9-rj72-356gCGA-vc78-gqq4-j2wpCGA-vrf6-9vmc-prmcCGA-vw5g-6p95-vcq3CGA-w8jq-5v86-7vprCGA-w9cc-pvp5-ffmrCGA-wc33-w7hj-fxmrCGA-wpxm-g2q8-7c68CGA-xccf-rr8c-wr4hCGA-xmhh-5p44-g3hgCGA-xmrj-3v3h-8ccqCGA-xr5v-8f3g-78p5
Advisory lineage Upstream: 0 Downstream: 13
Modified
Published: 13 Apr 2021, 06:50
Last modified:03 Aug 2024, 22:02
Vulnerability Summary
Overall Risk (default)
medium
35/100 CVSS Score
5.8 MEDIUM
v2.0 (nvd)
EPSS Score
10.23% MEDIUM
10% probability +9.61%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected
Timeline
13 Apr 2021, 06:50
Published
Vulnerability first disclosed
03 Aug 2024, 22:02
Last Modified
Vulnerability information updated
Description
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- v2.0•MEDIUM•Score: 5.8AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS Trends
Current EPSS score: 10.23%• Percentile: 95%
Techniques & Countermeasures
- CWE-20•Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-22•Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Affected Systems
- apache software foundation•apache commons io
Apache Commons IO 2.2 | Apache Commons IO 2.3 | Apache Commons IO 2.4 | Apache Commons IO 2.5 | Apache Commons IO 2.6
- apache•commons_io
2.2 | 2.3 | 2.4 | 2.5 | 2.6
- chainguard•druid
< 35.0.1-r1 | all
- chainguard•eco-java-gradle-1.11
all
- chainguard•eco-java-gradle-2.0
all
- chainguard•eco-java-gradle-2.1
all
- chainguard•eco-java-gradle-2.10
all
- chainguard•eco-java-gradle-2.11
all
- chainguard•eco-java-gradle-2.12
all
- chainguard•eco-java-gradle-2.13
all
- chainguard•eco-java-gradle-2.14
all
- chainguard•eco-java-gradle-2.14.1
all
- chainguard•eco-java-gradle-2.2
all
- chainguard•eco-java-gradle-2.2.1
all
- chainguard•eco-java-gradle-2.3
all
- chainguard•eco-java-gradle-2.4
all
- chainguard•eco-java-gradle-2.5
all
- chainguard•eco-java-gradle-2.6
all
- chainguard•eco-java-gradle-2.7
all
- chainguard•eco-java-gradle-2.8
all
- chainguard•eco-java-gradle-2.9
all
- chainguard•eco-java-gradle-3.0
all
- chainguard•eco-java-gradle-3.1
all
- chainguard•eco-java-gradle-3.2
all
- chainguard•eco-java-gradle-3.2.1
all
- chainguard•eco-java-gradle-3.3
all
- chainguard•eco-java-gradle-3.4
all
- chainguard•eco-java-gradle-3.4.1
all
- chainguard•eco-java-gradle-3.5
all
- chainguard•eco-java-gradle-3.5.1
all
- chainguard•eco-java-gradle-4.0
all
- chainguard•eco-java-gradle-4.0.1
all
- chainguard•eco-java-gradle-4.0.2
all
- chainguard•eco-java-gradle-4.1
all
- chainguard•eco-java-gradle-4.10
all
- chainguard•eco-java-gradle-4.10.1
all
- chainguard•eco-java-gradle-4.10.2
all
- chainguard•eco-java-gradle-4.10.3
all
- chainguard•eco-java-gradle-4.2
all
- chainguard•eco-java-gradle-4.2.1
all
- chainguard•eco-java-gradle-4.3
all
- chainguard•eco-java-gradle-4.3.1
all
- chainguard•eco-java-gradle-4.4
all
- chainguard•eco-java-gradle-4.4.1
all
- chainguard•eco-java-gradle-4.5
all
- chainguard•eco-java-gradle-4.5.1
all
- chainguard•eco-java-gradle-4.6
all
- chainguard•eco-java-gradle-4.7
all
- chainguard•eco-java-gradle-4.8
all
- chainguard•eco-java-gradle-4.8.1
all
Showing first 50 affected entries in server-rendered view.
References (91)
- https://issues.apache.org/jira/browse/IO-556
- https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab%40%3Cuser.commons.apache.org%3E
- https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330%40%3Cdev.commons.apache.org%3E
- https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31%40%3Cdev.commons.apache.org%3E
- https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71%40%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34%40%3Cdev.myfaces.apache.org%3E
- https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E
- https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a%40%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a%40%3Cuser.commons.apache.org%3E
- https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa%40%3Cuser.commons.apache.org%3E
- https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0%40%3Cpluto-dev.portals.apache.org%3E
- https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80%40%3Cpluto-dev.portals.apache.org%3E
- https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e%40%3Cpluto-scm.portals.apache.org%3E
- https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d%40%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2%40%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html
- https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046%40%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2%40%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b%40%3Cissues.zookeeper.apache.org%3E
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://security.netapp.com/advisory/ntap-20220210-0004/
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-29425
- https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31@%3Cdev.commons.apache.org%3E
- https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a@%3Cuser.commons.apache.org%3E
- https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80@%3Cpluto-dev.portals.apache.org%3E
- https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0@%3Cpluto-dev.portals.apache.org%3E
- https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d@%3Cdev.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330@%3Cdev.commons.apache.org%3E
- https://security.netapp.com/advisory/ntap-20220210-0004
- https://arxiv.org/pdf/2306.05534.pdf
- https://github.com/jensdietrich/xshady-release/tree/main/CVE-2021-29425
- https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
- https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34@%3Cdev.myfaces.apache.org%3E
- https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e@%3Cpluto-scm.portals.apache.org%3E
- https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2@%3Ccommits.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b@%3Cissues.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa@%3Cuser.commons.apache.org%3E
- https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374@%3Cnotifications.zookeeper.apache.org%3E
- https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04@%3Ccommits.pulsar.apache.org%3E
- https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29@%3Cissues.zookeeper.apache.org%3E
- https://security-tracker.debian.org/tracker/CVE-2021-29425