Apache · Apache Maven Maven-Shared-Utils · CVE-2022-29599
**Name of the Vulnerable Software and Affected Versions**
Apache Maven maven-shared-utils versions prior to 3.3.3
**Description**
The issue is related to the Commandline class in Apache Maven maven-shared-utils, which can emit double-quoted strings without proper escaping. This allows for shell injection attacks, potentially enabling a remote attacker to conduct code injection attacks in the command shell.
**Recommendations**
For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue. As a temporary workaround, consider disabling the use of double-quoted strings in the Commandline class until a patch is available. Restrict access to the Commandline class to minimize the risk of exploitation. Avoid using the Commandline class with untrusted input until the issue is resolved.