CVE-2024-29133: Apache Commons Configuration

Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

Affected products

• Apache Commons Configuration: from 2.0, before 2.10.1 (fixed in 2.10.1)
• Fedoraproject Fedora: version 39 only; version 40 only

Published 2024-03-21. Last modified 2026-06-17.