Description
ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE).
Remediation
References
https://github.com/ff4j/ff4j/issues/624
Related Vulnerabilities
CVE-2014-6394 Vulnerability in maven package org.webjars.npm:send
CVE-2020-11971 Vulnerability in maven package org.apache.camel:camel-api
CVE-2021-39154 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-37956 Vulnerability in maven package org.jenkins-ci.plugins:test-results-aggregator
CVE-2022-45207 Vulnerability in maven package org.jeecgframework.boot:jeecg-module-system