PT-2025-29245 · Apache+6 · Apache Commons Lang3+7

CVE-2025-48924 · Publicado 2025-07-11 · Atualizado 2026-06-26

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas: Apache Commons Lang versões 2.0 até 2.6 Apache Commons Lang3 versões 3.0 até 3.17.9

Descrição: O método ClassUtils.getClass() pode causar um StackOverflowError ao processar entradas excessivamente longas. Este erro pode levar ao encerramento da aplicação, pois os erros normalmente não são tratados.

Recomendações: Atualize para a versão 3.18.0.

Exploit

Correção

DoS

Uncontrolled Recursion

Enumeração de Fraquezas

CWE-674

Identificadores relacionados

ALT-PU-2025-12843

ALT-PU-2025-13422

AZL-65144

AZL-65181

BDU:2025-08956

CLEANSTART-2026-BG72514

CLEANSTART-2026-CQ39708

CLEANSTART-2026-DD05788

CLEANSTART-2026-DV49899

CLEANSTART-2026-FO41609

CLEANSTART-2026-GE08280

CLEANSTART-2026-GH89210

CLEANSTART-2026-IA43044

CLEANSTART-2026-IW08736

CLEANSTART-2026-JU62349

CLEANSTART-2026-JW30455

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-LZ76508

CLEANSTART-2026-MM00120

CLEANSTART-2026-OQ84658

CLEANSTART-2026-RN56220

CLEANSTART-2026-RZ30606

CLEANSTART-2026-SQ91016

CLEANSTART-2026-SV95049

CLEANSTART-2026-VH41554

CLEANSTART-2026-WG59699

CLEANSTART-2026-WK99982

CVE-2025-48924

DLA-4262-1

DLA-4262-2

DLA-4286-1

DLA-4286-2

ECHO-4C54-3BBA-F75D

GHSA-J288-Q9X7-2F5V

MGASA-2025-0293

OESA-2025-1929

OESA-2025-1971

OESA-2025-1972

OESA-2025-2030

OESA-2025-2031

OESA-2025-2032

OESA-2025-2061

OPENSUSE-SU-2025:15347-1

OPENSUSE-SU-2026:10784-1

OPENSUSE-SU-2026:20841-1

SUSE-SU-2025:02785-1

SUSE-SU-2025:02786-1

SUSE-SU-2025:02818-1

SUSE-SU-2025_02785-1

SUSE-SU-2025_02786-1

SUSE-SU-2025_02818-1

SUSE-SU-2026:21996-1

USN-8364-1

Produtos afetados

Alt Linux

Apache Commons Lang

Apache Commons Lang3

Debian

Linuxmint

Red Os

Suse

Ubuntu

Referências · 517

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48924.json · Exploit
• 🔥 https://github.com/huydoppaz/CVE-2024-8698-POC · Exploit
• https://github.com/apache/commons-lang · Nota
• https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RN56220.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BG72514.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OQ84658.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LE11246.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RZ30606.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LZ76508.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DD05788.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GH89210.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WG59699.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CQ39708.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KU61465.json · Nota