Skip to content

Product

com.cronutils/cron-utils vulnerabilities

2 published CVES affecting com.cronutils/cron-utils, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest com.cronutils/cron-utils CVEs

Newest publication first

  1. CVE-2021-41269 Unauthenticated remote code injection in cron-utils

    Published
    CriticalCVSS 9.8 EPSS 4.3%

    cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticate...

  2. CVE-2020-26238 Critical vulnerability found in cron-utils

    Published
    HighCVSS 8.1 EPSS 4.2%

    Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressions, leading to unauth...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.