[TINKERPOP-2771] Critical severity security vulnerabilty in commons-configuration 2.7

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.6.0
• Fix Version/s: 3.7.0, 3.6.2, 3.5.5
• Component/s: console, server
• Assignee: Stephen Mallette
• Reporter: Aaron Coady
• Created: 11/Jul/22 13:39
• Updated: 13/Sep/22 12:56
• Resolved: 28/Jul/22 15:26

Description

Apache commons configuration v2.7 has a critical severity security vulnerability identified here:

https://nvd.nist.gov/vuln/detail/CVE-2022-33980

 

This is resolved in version 2.8.0