Description
BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file.
Remediation
References
https://github.com/lessthanoptimal/BoofCV/issues/406
Related Vulnerabilities
CVE-2020-7774 Vulnerability in maven package org.webjars.npm:y18n
CVE-2020-28423 Vulnerability in npm package monorepo-build
CVE-2023-26108 Vulnerability in npm package @nestjs/core
CVE-2020-8298 Vulnerability in npm package fs-path
CVE-2022-1291 Vulnerability in maven package org.webjars.bowergithub.hhurz:tableexport.jquery.plugin