CVE-2024-29131: Apache Commons Configuration

High severity, CVSS 7.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

Affected products

• Apache Commons Configuration: from 2.0, before 2.10.1 (fixed in 2.10.1)
• Fedoraproject Fedora: version 39 only; version 40 only
• Netapp Ontap Tools: version 10 only
• Netapp Snapcenter: affected versions not specified

Published 2024-03-21. Last modified 2026-06-17.