Description
Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.
Remediation
References
https://github.com/larsga/Duke/issues/273
Related Vulnerabilities
CVE-2021-4279 Vulnerability in maven package org.webjars.bower:fast-json-patch
CVE-2021-26540 Vulnerability in maven package org.webjars.npm:sanitize-html
CVE-2023-26492 Vulnerability in npm package directus
CVE-2018-20190 Vulnerability in npm package node-sass
CVE-2021-43116 Vulnerability in maven package com.alibaba.nacos:nacos-client