CVE-2024-29131
MediumAdvisory
Published 21 Mar 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.021
- 80th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 52
- of 17,781 indexed, latest versions
- Container images
- 47
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 47 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| commons-configuration2maven | 2.1.1, 2.4, 2.5, 2.7+2 more | 2.10.1 | 47 |
- OSV records
- GHSA-xjp4-hw94-mvp5
Charts affected
52 by stars
Container images carrying it
47 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gchq/ | 5ec58edbb2db | commons-configuration2 | 2.10.1 | 3 |
| library/ | 8c5f7881cebb | commons-configuration2 | 2.10.1 | 3 |
| apache/ | 0116fb802786 | commons-configuration2 | 2.10.1 | 2 |
| hazelcast/ | 5dd5d31c7a06 | commons-configuration2 | 2.10.1 | 2 |
| library/ | 56a9453c4064 | commons-configuration2 | 2.10.1 | 2 |
| 5200710/ | 092d3088a5fb | commons-configuration2 | 2.10.1 | 1 |
| 5200710/ | e34ab066d2ed | commons-configuration2 | 2.10.1 | 1 |
| airsonicadvanced/ | f7cbafac2806 | commons-configuration2 | 2.10.1 | 1 |
| apache/ | 1f96558fd292 | commons-configuration2 | 2.10.1 | 1 |
| apache/ | 0cef139b6bf1 | commons-configuration2 | 2.10.1 | 1 |
| apache/ | 80136ae753ee | commons-configuration2 | 2.10.1 | 1 |
| apache/ | af361b20bec0 | commons-configuration2 | 2.10.1 | 1 |
| apache/ | 090b7f87ec7f | commons-configuration2 | 2.10.1 | 1 |
| apache/ | 76c176e8a0e4 | commons-configuration2 | 2.10.1 | 1 |
| assistiot/ | c8b6c7eaa0cd | commons-configuration2 | 2.10.1 | 1 |
| atlassian/ | 3b9222ab32ef | commons-configuration2 | 2.10.1 | 1 |
| ckan/ | ef8e5d3e6be1 | commons-configuration2 | 2.10.1 | 1 |
| datappeal/ | e38c085a3567 | commons-configuration2 | 2.10.1 | 1 |
| dbanda/ | 0ca125e68e53 | commons-configuration2 | 2.10.1 | 1 |
| dbanda/ | d0e6367876ae | commons-configuration2 | 2.10.1 | 1 |
| dremio/ | 80ed2e3b7c43 | commons-configuration2 | 2.10.1 | 1 |
| egdsandaru/ | 681baa1926f4 | commons-configuration2 | 2.10.1 | 1 |
| farberg/ | 4b4a22487394 | commons-configuration2 | 2.10.1 | 1 |
| gchq/ | c460bb587d6d | commons-configuration2 | 2.10.1 | 1 |
| gocd/ | 2da45cb09d57 | commons-configuration2 | 2.10.1 | 1 |
| gotson/ | 9b15ea6bfc30 | commons-configuration2 | 2.10.1 | 1 |
| gradiant/ | e3bf364fe713 | commons-configuration2 | 2.10.1 | 1 |
| hazelcast/ | 8fe26efde8e1 | commons-configuration2 | 2.10.1 | 1 |
| hazelcast/ | a825ecbe9fda | commons-configuration2 | 2.10.1 | 1 |
| library/ | 348e3f56faa2 | commons-configuration2 | 2.10.1 | 1 |
| library/ | 8f01f7bb053e | commons-configuration2 | 2.10.1 | 1 |
| library/ | d124efd81fbb | commons-configuration2 | 2.10.1 | 1 |
| magento/ | 59fb6f0f1461 | commons-configuration2 | 2.10.1 | 1 |
| metabase/ | 7807bc5cad17 | commons-configuration2 | 2.10.1 | 1 |
| opensearchproject/ | 57c25fa01d3c | commons-configuration2 | 2.10.1 | 1 |
| sslhep/ | 9e80af083079 | commons-configuration2 | 2.10.1 | 1 |
| trinodb/ | 38c6f24ab1a4 | commons-configuration2 | 2.10.1 | 1 |
| trinodb/ | ee80ab5eeab2 | commons-configuration2 | 2.10.1 | 1 |
| vromero/ | 408d6a46b153 | commons-configuration2 | 2.10.1 | 1 |
| zahoriaut/ | 351f8a220ed7 | commons-configuration2 | 2.10.1 | 1 |
| ghcr.io/ | 4a2824296412 | commons-configuration2 | 2.10.1 | 1 |
| ghcr.io/ | ac62269785ac | commons-configuration2 | 2.10.1 | 1 |
| ghcr.io/ | 865ff4da5686 | commons-configuration2 | 2.10.1 | 1 |
| ghcr.io/ | baa4fa9549dc | commons-configuration2 | 2.10.1 | 1 |
| ghcr.io/ | e949b0f733f0 | commons-configuration2 | 2.10.1 | 1 |
| ghcr.io/ | d46ce7b96482 | commons-configuration2 | 2.10.1 | 1 |
| public.ecr.aws/ | 794b3bff9510 | commons-configuration2 | 2.10.1 | 1 |