You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@commons.apache.org by "Gary Gregory (JIRA)" <ji...@apache.org> on 2016/05/08 23:30:13 UTC
[jira] [Comment Edited] (IO-508) Veracode static scan still shows
1 very high OS Command injection in commons-io-2.4.jar
[ https://issues.apache.org/jira/browse/IO-508?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15275788#comment-15275788 ]
Gary Gregory edited comment on IO-508 at 5/8/16 11:29 PM:
----------------------------------------------------------
We just released version 2.5. Can you check there please?
was (Author: garydgregory):
We just released verison 2.5. Can you check there please?
> Veracode static scan still shows 1 very high OS Command injection in commons-io-2.4.jar
> ----------------------------------------------------------------------------------------
>
> Key: IO-508
> URL: https://issues.apache.org/jira/browse/IO-508
> Project: Commons IO
> Issue Type: Bug
> Affects Versions: 2.4
> Environment: Windows
> Reporter: I-Min Mau
>
> I cloned IO-474 because we specifically upgraded the commons-io jar in our application recently to 2.4 jar and still sees, in the Veracode static scan result this one instance: 17561 189 - commons-io-2.4.jar org/.../io/FileSystemUtils.java 535 4/23/16
> Since this is going to be visible on our security reports including to potential customers, please help us at least remediate or otherwise fix in a higher version. Thanks!
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)