CVE-2016-15057
Gravedad CVSS v3.1:
CRÍTICA
Tipo:
CWE-77
Neutralización incorrecta de elementos especiales usados en un comando (Inyección de comando)
Fecha de publicación:
26/01/2026
Última modificación:
26/01/2026
Descripción
*** Pendiente de traducción *** ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command (&#39;Command Injection&#39;) vulnerability in Apache Continuum.<br />
<br />
This issue affects Apache Continuum: all versions.<br />
<br />
Attackers with access to the installations REST API can use this to invoke arbitrary commands on the server.<br />
<br />
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.<br />
<br />
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Impacto
Puntuación base 3.x
9.90
Gravedad 3.x
CRÍTICA