Cron Utils
Approved changes feed: RSS · Atom
cpe:2.3:a:cron-utils_project:cron-utils:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cron Utils Project (dbf7b4a9-97ed-5474-9014-604dd210ab81) |
|---|---|
| Product | Cron Utils (8e0c6de0-6e23-58bf-ae24-5457acfacfc0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jmrozanec/cron-utils |
purl2cpe | 2026-06-01 10:11:09.580216 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41269 |
vulnerable | 2026-06-08 05:35:20.080047 |
Unauthenticated remote code injection in cron-utils
CRITICAL (10)
cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution (RCE) vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron annotation to validate untrusted Cron expressions are affected. The issue was patched and a new version was released. Please upgrade to version 9.1.6. There are no known workarounds known.
Published: 2021-11-15T20:30:14.000Z
Updated: 2024-08-04T03:08:31.579Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26238 |
vulnerable | 2026-06-08 05:23:50.942048 |
Critical vulnerability found in cron-utils
HIGH (7.9)
Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution (RCE) vulnerability. Only projects using the @Cron annotation to validate untrusted Cron expressions are affected. This issue was patched in version 9.1.3.
Published: 2020-11-24T23:50:12.000Z
Updated: 2024-08-04T15:56:04.555Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.